Преглед изворни кода

[bitnami/template] Detect non-standard images (#30908)

Signed-off-by: Carlos Rodríguez Hernández <carlosrh@vmware.com>
Carlos Rodríguez Hernández пре 9 месеци
родитељ
комит
4c0c2ac01a
2 измењених фајлова са 7 додато и 1 уклоњено
  1. 2 1
      template/CHART_NAME/templates/NOTES.txt
  2. 5 0
      template/CHART_NAME/values.yaml

+ 2 - 1
template/CHART_NAME/templates/NOTES.txt

@@ -33,4 +33,5 @@ In order to replicate the container startup scripts execute this command:
 {{- include "common.warnings.rollingTag" .Values.%%MAIN_OBJECT_BLOCK%%.image }}
 {{- include "common.warnings.rollingTag" .Values.%%OTHER_OBJECT_BLOCK%%.image }}
 {{- include "%%TEMPLATE_NAME%%.validateValues" . }}
-{{- include "common.warnings.modifiedImages" (dict "images" (list .Values.%%MAIN_OBJECT_BLOCK%%.image .Values.%%OTHER_OBJECT_BLOCK%%.image) "context" $) }}
+{{- include "common.warnings.modifiedImages" (dict "images" (list .Values.%%MAIN_OBJECT_BLOCK%%.image .Values.%%OTHER_OBJECT_BLOCK%%.image) "context" $) }}
+{{- include "common.errors.insecureImages" (dict "images" (list .Values.%%MAIN_OBJECT_BLOCK%%.image .Values.%%OTHER_OBJECT_BLOCK%%.image) "context" $) }}

+ 5 - 0
template/CHART_NAME/values.yaml

@@ -19,6 +19,11 @@ global:
   ##
   imagePullSecrets: []
   defaultStorageClass: ""
+  ## Security parameters
+  ##
+  security:
+    ## @param global.security.allowInsecureImages Allows skipping image verification
+    allowInsecureImages: false
   ## Compatibility adaptations for Kubernetes platforms
   ##
   compatibility: