[stable/parse] Use immutable tags (#14201)

* Bump chart version

Signed-off-by: Carlos Rodriguez Hernandez <crhernandez@bitnami.com>

* [stable/parse] Use immutable tags

Signed-off-by: Carlos Rodriguez Hernandez <crhernandez@bitnami.com>

* Fix typo

Signed-off-by: Carlos Rodriguez Hernandez <crhernandez@bitnami.com>

stable/parse/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v1
 name: parse
-version: 6.2.5
+version: 6.2.6
 appVersion: 3.4.0
 description: Parse is a platform that enables users to add a scalable and powerful backend to launch a full-featured app for iOS, Android, JavaScript, Windows, Unity, and more.
 keywords:

stable/parse/README.md

@@ -56,7 +56,7 @@ The following table lists the configurable parameters of the Parse chart and the
 | `service.nodePorts.http`              | Kubernetes http node port                | `""`                                                    |
 | `server.image.registry`               | Parse image registry                     | `docker.io`                                             |
 | `server.image.repository`             | Parse image name                         | `bitnami/parse`                                         |
-| `server.image.tag`                    | Parse image tag                          | `{VERSION}`                                             |
+| `server.image.tag`                    | Parse image tag                          | `{TAG_NAME}`                                            |
 | `server.image.pullPolicy`             | Image pull policy                        | `Always` if `imageTag` is `latest`, else `IfNotPresent` |
 | `server.image.pullSecrets`            | Specify docker-registry secret names as an array               | `[]` (does not add image pull secrets to deployed pods) |
 | `server.securityContext.enabled`      | Enable security context for Parse Server | `true`                                                  |
@@ -70,7 +70,7 @@ The following table lists the configurable parameters of the Parse chart and the
 | `dashboard.enabled`                   | Enable parse dashboard                   | `true`                                                  |
 | `dashboard.image.registry`            | Dashboard image registry                 | `docker.io`                                             |
 | `dashboard.image.repository`          | Dashboard image name                     | `bitnami/parse-dashboard`                               |
-| `dashboard.image.tag`                 | Dashboard image tag                      | `{VERSION}`                                             |
+| `dashboard.image.tag`                 | Dashboard image tag                      | `{TAG_NAME}`                                            |
 | `dashboard.image.pullPolicy`          | Image pull policy                        | `Always` if `imageTag` is `latest`, else `IfNotPresent` |
 | `dashboard.securityContext.enabled`   | Enable security context for Dashboard    | `true`                                                  |
 | `dashboard.securityContext.fsGroup`   | Group ID for Dashboard container         | `1001`                                                  |
@@ -141,6 +141,12 @@ $ helm install --name my-release -f values.yaml stable/parse
 
 > **Tip**: You can use the default [values.yaml](values.yaml)
 
+### [Rolling VS Immutable tags](https://docs.bitnami.com/containers/how-to/understand-rolling-tags-containers/)
+
+It is strongly recommended to use immutable tags in a production environment. This ensures your deployment does not change automatically if the same tag is updated with a different image.
+
+Bitnami will release a new chart updating its containers if a new version of the main container, significant changes, or critical vulnerabilities exist.
+
 ## Persistence
 
 The [Bitnami Parse](https://github.com/bitnami/bitnami-docker-parse) image stores the Parse data and configurations at the `/bitnami/parse` path of the container.

stable/parse/templates/NOTES.txt

@@ -83,3 +83,5 @@ service:
   echo Password: $(kubectl get secret --namespace {{ .Release.Namespace }} {{ template "parse.fullname" . }} -o jsonpath="{.data.parse-dashboard-password}" | base64 --decode)
 {{- end }}
 {{- end }}
+
+{{ include "parse.checkRollingTags" . }}

stable/parse/templates/_helpers.tpl

@@ -131,3 +131,15 @@ imagePullSecrets:
 {{- end }}
 {{- end -}}
 {{- end -}}
+
+{{/* Check if there are rolling tags in the images */}}
+{{- define "parse.checkRollingTags" -}}
+{{- if and (contains "bitnami/" .Values.server.image.repository) (not (.Values.server.image.tag | regexFind "-r\\d+$")) }}
+WARNING: Rolling tag detected ({{ .Values.server.image.repository }}:{{ .Values.server.image.tag }}), please note that it is strongly recommended to avoid using rolling tags in a production environment.
++info https://docs.bitnami.com/containers/how-to/understand-rolling-tags-containers/
+{{- end }}
+{{- if and (contains "bitnami/" .Values.dashboard.image.repository) (not (.Values.dashboard.image.tag | regexFind "-r\\d+$")) }}
+WARNING: Rolling tag detected ({{ .Values.dashboard.image.repository }}:{{ .Values.dashboard.image.tag }}), please note that it is strongly recommended to avoid using rolling tags in a production environment.
++info https://docs.bitnami.com/containers/how-to/understand-rolling-tags-containers/
+{{- end }}
+{{- end -}}

stable/parse/values.yaml

@@ -96,7 +96,7 @@ dashboard:
   image:
     registry: docker.io
     repository: bitnami/parse-dashboard
-    tag: 1.2.0
+    tag: 1.3.0-debian-9-r28
     ## Specify a imagePullPolicy
     ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent'
     ## ref: http://kubernetes.io/docs/user-guide/images/#pre-pulling-images