Skip to content

[Backport release-0.41] [mongodb] Remove user-configurable images from MongoDB chart - #1904

Merged
Andrei Kvapil (kvaps) merged 1 commit into
release-0.41from
backport-1901-to-release-0.41
Jan 22, 2026
Merged

Andrei Kvapil (kvaps) merged 1 commit into
release-0.41from
backport-1901-to-release-0.41

Conversation

@github-actions

Copy link
Copy Markdown

Description

Backport of #1901 to release-0.41.

Remove the ability for users to specify custom container images
(images.pmm and images.backup) in the MongoDB application values.

This is a security hardening measure - allowing users to specify
arbitrary container images could lead to running malicious or
compromised images, supply chain attacks, or privilege escalation.

The images are now hardcoded in the template:
- percona/pmm-client:2.44.1
- percona/percona-backup-mongodb:2.11.0

Co-Authored-By: Claude <[email protected]>
Signed-off-by: Andrei Kvapil <[email protected]>
(cherry picked from commit beb6e1a)
@coderabbitai

coderabbitai Bot commented Jan 22, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@kvaps
Andrei Kvapil (kvaps) merged commit e38b7a0 into release-0.41 Jan 22, 2026
4 checks passed
@kvaps
Andrei Kvapil (kvaps) deleted the backport-1901-to-release-0.41 branch January 22, 2026 22:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/M This PR changes 30-99 lines, ignoring generated files

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant