Ver código fonte

[bitnami/template] Detect non-standard images (#30908)

Signed-off-by: Carlos Rodríguez Hernández <carlosrh@vmware.com>
Carlos Rodríguez Hernández 9 meses atrás
pai
commit
4c0c2ac01a

+ 2 - 1
template/CHART_NAME/templates/NOTES.txt

@@ -33,4 +33,5 @@ In order to replicate the container startup scripts execute this command:
 {{- include "common.warnings.rollingTag" .Values.%%MAIN_OBJECT_BLOCK%%.image }}
 {{- include "common.warnings.rollingTag" .Values.%%OTHER_OBJECT_BLOCK%%.image }}
 {{- include "%%TEMPLATE_NAME%%.validateValues" . }}
-{{- include "common.warnings.modifiedImages" (dict "images" (list .Values.%%MAIN_OBJECT_BLOCK%%.image .Values.%%OTHER_OBJECT_BLOCK%%.image) "context" $) }}
+{{- include "common.warnings.modifiedImages" (dict "images" (list .Values.%%MAIN_OBJECT_BLOCK%%.image .Values.%%OTHER_OBJECT_BLOCK%%.image) "context" $) }}
+{{- include "common.errors.insecureImages" (dict "images" (list .Values.%%MAIN_OBJECT_BLOCK%%.image .Values.%%OTHER_OBJECT_BLOCK%%.image) "context" $) }}

+ 5 - 0
template/CHART_NAME/values.yaml

@@ -19,6 +19,11 @@ global:
   ##
   imagePullSecrets: []
   defaultStorageClass: ""
+  ## Security parameters
+  ##
+  security:
+    ## @param global.security.allowInsecureImages Allows skipping image verification
+    allowInsecureImages: false
   ## Compatibility adaptations for Kubernetes platforms
   ##
   compatibility: