Skip to content

Commit f47e86a

Browse files
Carlos Rodríguez HernándezBitnami Containers
Carlos Rodríguez Hernández
and
Bitnami Containers
authored
[bitnami/argo-workflows] Detect non-standard images (#30864)
* [bitnami/argo-workflows] Detect non-standard images Signed-off-by: Carlos Rodríguez Hernández <[email protected]> * Update CHANGELOG.md Signed-off-by: Bitnami Containers <[email protected]> * Update NOTES.txt Signed-off-by: Carlos Rodríguez Hernández <[email protected]> * Modify values.yaml Signed-off-by: Carlos Rodríguez Hernández <[email protected]> * Update README.md with readme-generator-for-helm Signed-off-by: Bitnami Containers <[email protected]> --------- Signed-off-by: Carlos Rodríguez Hernández <[email protected]> Signed-off-by: Bitnami Containers <[email protected]> Co-authored-by: Bitnami Containers <[email protected]>
1 parent 739c820 commit f47e86a

File tree

6 files changed

+29
-14
lines changed

6 files changed

+29
-14
lines changed

‎bitnami/argo-workflows/CHANGELOG.md

+6-2
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,12 @@
11
# Changelog
22

3-
## 11.0.3 (2024-12-03)
3+
## 11.1.0 (2024-12-10)
44

5-
* [bitnami/argo-workflows] Release 11.0.3 ([#30740](https://github.com/bitnami/charts/pull/30740))
5+
* [bitnami/argo-workflows] Detect non-standard images ([#30864](https://github.com/bitnami/charts/pull/30864))
6+
7+
## <small>11.0.3 (2024-12-03)</small>
8+
9+
* [bitnami/argo-workflows] Release 11.0.3 (#30740) ([a3c6c77](https://github.com/bitnami/charts/commit/a3c6c77e3ed1f94056b2fc4212167b326c66bff6)), closes [#30740](https://github.com/bitnami/charts/issues/30740)
610

711
## <small>11.0.2 (2024-12-02)</small>
812

‎bitnami/argo-workflows/Chart.lock

+4-4
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,12 @@
11
dependencies:
22
- name: postgresql
33
repository: oci://registry-1.docker.io/bitnamicharts
4-
version: 16.2.4
4+
version: 16.2.5
55
- name: mysql
66
repository: oci://registry-1.docker.io/bitnamicharts
77
version: 12.1.0
88
- name: common
99
repository: oci://registry-1.docker.io/bitnamicharts
10-
version: 2.27.2
11-
digest: sha256:bb7f67a6c36c2c166621735f606b86482be6498c47f6a130167a8cc6e9e1605a
12-
generated: "2024-12-03T21:22:08.25248735Z"
10+
version: 2.28.0
11+
digest: sha256:e4bffd7686f2f5e89fed88de531bd159e9075bfc84ad0bd112f538ea0b3cb05b
12+
generated: "2024-12-10T16:49:26.840282+01:00"

‎bitnami/argo-workflows/Chart.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -42,4 +42,4 @@ maintainers:
4242
name: argo-workflows
4343
sources:
4444
- https://github.com/bitnami/charts/tree/main/bitnami/argo-workflows
45-
version: 11.0.3
45+
version: 11.1.0

‎bitnami/argo-workflows/README.md

+11-6
Original file line numberDiff line numberDiff line change
@@ -218,12 +218,13 @@ As an alternative, use one of the preset configurations for pod affinity, pod an
218218

219219
### Global parameters
220220

221-
| Name | Description | Value |
222-
| ----------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
223-
| `global.imageRegistry` | Global Docker image registry | `""` |
224-
| `global.imagePullSecrets` | Global Docker registry secret names as an array | `[]` |
225-
| `global.defaultStorageClass` | Global default StorageClass for Persistent Volume(s) | `""` |
226-
| `global.compatibility.openshift.adaptSecurityContext` | Adapt the securityContext sections of the deployment to make them compatible with Openshift restricted-v2 SCC: remove runAsUser, runAsGroup and fsGroup and let the platform use their allowed default IDs. Possible values: auto (apply if the detected running cluster is Openshift), force (perform the adaptation always), disabled (do not perform adaptation) | `auto` |
221+
| Name | Description | Value |
222+
| ----------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------- |
223+
| `global.imageRegistry` | Global Docker image registry | `""` |
224+
| `global.imagePullSecrets` | Global Docker registry secret names as an array | `[]` |
225+
| `global.defaultStorageClass` | Global default StorageClass for Persistent Volume(s) | `""` |
226+
| `global.security.allowInsecureImages` | Allows skipping image verification | `false` |
227+
| `global.compatibility.openshift.adaptSecurityContext` | Adapt the securityContext sections of the deployment to make them compatible with Openshift restricted-v2 SCC: remove runAsUser, runAsGroup and fsGroup and let the platform use their allowed default IDs. Possible values: auto (apply if the detected running cluster is Openshift), force (perform the adaptation always), disabled (do not perform adaptation) | `auto` |
227228

228229
### Common parameters
229230

@@ -604,6 +605,10 @@ Find more information about how to deal with common errors related to Bitnami's
604605

605606
## Upgrading
606607

608+
### To 11.1.0
609+
610+
This version introduces image verification for security purposes. To disable it, set `global.security.allowInsecureImages` to `true`. More details at [GitHub issue](https://github.com/bitnami/charts/issues/30850).
611+
607612
### To 11.0.0
608613

609614
This major bump updates the MySQL subchart to version 12.0.0. This subchart updates the StatefulSet objects `serviceName` to use a headless service, as the current non-headless service attached to it was not providing DNS entries. This will cause an upgrade issue because it changes "immutable fields". To workaround it, delete the StatefulSet objects as follows (replace the RELEASE_NAME placeholder):

‎bitnami/argo-workflows/templates/NOTES.txt

+2-1
Original file line numberDiff line numberDiff line change
@@ -63,4 +63,5 @@ Obtain the Argo Workflows access token:
6363
{{- include "common.warnings.rollingTag" .Values.executor.image }}
6464
{{- include "argo-workflows.validateValues" . }}
6565
{{- include "common.warnings.resources" (dict "sections" (list "controller" "executor" "server") "context" $) }}
66-
{{- include "common.warnings.modifiedImages" (dict "images" (list .Values.server.image .Values.controller.image .Values.executor.image) "context" $) }}
66+
{{- include "common.warnings.modifiedImages" (dict "images" (list .Values.server.image .Values.controller.image .Values.executor.image) "context" $) }}
67+
{{- include "common.errors.insecureImages" (dict "images" (list .Values.server.image .Values.controller.image .Values.executor.image) "context" $) }}

‎bitnami/argo-workflows/values.yaml

+5
Original file line numberDiff line numberDiff line change
@@ -17,6 +17,11 @@ global:
1717
##
1818
imagePullSecrets: []
1919
defaultStorageClass: ""
20+
## Security parameters
21+
##
22+
security:
23+
## @param global.security.allowInsecureImages Allows skipping image verification
24+
allowInsecureImages: false
2025
## Compatibility adaptations for Kubernetes platforms
2126
##
2227
compatibility:

0 commit comments

Comments
 (0)