[bitnami/grafana] Detect non-standard images

Signed-off-by: Carlos Rodríguez Hernández <[email protected]>
bitnami · Dec 10, 2024 · c5b01fa · c5b01fa
1 parent d5fbf33
commit c5b01fa
Show file tree

Hide file tree

Showing 5 changed files with 14 additions and 5 deletions.
diff --git a/bitnami/grafana/Chart.lock b/bitnami/grafana/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: common
   repository: oci://registry-1.docker.io/bitnamicharts
-  version: 2.26.0
-digest: sha256:5ff7837915aef0067bd32271ee2b10c990774c16c4b6fe0a7c5eb6e53530ce08
-generated: "2024-10-18T13:44:46.726377183Z"
+  version: 2.28.0
+digest: sha256:5b30f0fa07bb89b01c55fd6258c8ce22a611b13623d4ad83e8fdd1d4490adc74
+generated: "2024-12-10T17:00:56.559514+01:00"
diff --git a/bitnami/grafana/Chart.yaml b/bitnami/grafana/Chart.yaml
@@ -31,4 +31,4 @@ maintainers:
 name: grafana
 sources:
 - https://github.com/bitnami/charts/tree/main/bitnami/grafana
-version: 11.3.26
+version: 11.4.0
diff --git a/bitnami/grafana/README.md b/bitnami/grafana/README.md
@@ -687,6 +687,10 @@ Find more information about how to deal with common errors related to Bitnami's
 
 ## Upgrading
 
+### To 11.4.0
+
+This version introduces image verification for security purposes. To disable it, set `global.security.allowInsecureImages` to `true`. More details at [GitHub issue](https://github.com/bitnami/charts/issues/30850).
+
 ### To 11.0.0
 
 This major release only bumps the Grafana version to 11.x. No major issues are expected during the upgrade. See the upstream documentation <https://grafana.com/docs/grafana/latest/whatsnew/whats-new-in-v11-0/> for more info about the changes included in this new major version of the application

diff --git a/bitnami/grafana/templates/NOTES.txt b/bitnami/grafana/templates/NOTES.txt
@@ -34,4 +34,4 @@ Did you know there are enterprise versions of the Bitnami catalog? For enhanced
 {{ include "grafana.validateValues" . }}
 {{ include "grafana.validateValues.database" . }}
 {{- include "common.warnings.resources" (dict "sections" (list "grafana" "volumePermissions") "context" $) }}
-{{- include "common.warnings.modifiedImages" (dict "images" (list .Values.image .Values.volumePermissions.image) "context" $) }}
+{{- include "common.warnings.modifiedImages" (dict "images" (list .Values.image .Values.volumePermissions.image) "context" $) }}{{- include "common.errors.insecureImages" (dict "images" (list .Values.image .Values.volumePermissions.image) "context" $) }}
diff --git a/bitnami/grafana/values.yaml b/bitnami/grafana/values.yaml
@@ -20,6 +20,11 @@ global:
   imagePullSecrets: []
   defaultStorageClass: ""
   storageClass: ""
+  ## Security parameters
+  ##
+  security:
+    ## @param global.security.allowInsecureImages Allows skipping image verification
+    allowInsecureImages: false
   ## Compatibility adaptations for Kubernetes platforms
   ##
   compatibility: