[bitnami/mlflow] Release 2.5.1 (#32146)

bitnami · Feb 25, 2025 · 9553964 · 9553964
1 parent 5daa205
commit 9553964
Show file tree

Hide file tree

Showing 8 changed files with 68 additions and 40 deletions.
diff --git a/bitnami/mlflow/CHANGELOG.md b/bitnami/mlflow/CHANGELOG.md
@@ -1,8 +1,14 @@
 # Changelog
 
+## 2.5.1 (2025-02-25)
+
+* [bitnami/mlflow] Release 2.5.1 ([#32146](https://github.com/bitnami/charts/pull/32146))
+
 ## 2.5.0 (2025-02-20)
 
-* [bitnami/mlflow] feat: use new helper for checking API versions ([#32058](https://github.com/bitnami/charts/pull/32058))
+* [bitnami/*] Use CDN url for the Bitnami Application Icons (#31881) ([d9bb11a](https://github.com/bitnami/charts/commit/d9bb11a9076b9bfdcc70ea022c25ef50e9713657)), closes [#31881](https://github.com/bitnami/charts/issues/31881)
+* [bitnami/mlflow] feat: use new helper for checking API versions (#32058) ([6fb67a6](https://github.com/bitnami/charts/commit/6fb67a63dcbd1284efd29a141eb81e7410232a03)), closes [#32058](https://github.com/bitnami/charts/issues/32058)
+* Update copyright year (#31682) ([e9f02f5](https://github.com/bitnami/charts/commit/e9f02f5007068751f7eb2270fece811e685c99b6)), closes [#31682](https://github.com/bitnami/charts/issues/31682)
 
 ## <small>2.4.1 (2025-01-30)</small>
 

diff --git a/bitnami/mlflow/Chart.lock b/bitnami/mlflow/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: minio
   repository: oci://registry-1.docker.io/bitnamicharts
-  version: 15.0.3
+  version: 15.0.4
 - name: postgresql
   repository: oci://registry-1.docker.io/bitnamicharts
-  version: 16.4.9
+  version: 16.4.14
 - name: common
   repository: oci://registry-1.docker.io/bitnamicharts
   version: 2.30.0
-digest: sha256:7e4bca2f1925f0c326e444928bfb908f44d6595353e9a5efffd84630d6b1611d
-generated: "2025-02-20T08:56:48.847871+01:00"
+digest: sha256:34b5e5975432f897f0935412c78ebaf596398d9ba089d900ff67bf9d166ee6b7
+generated: "2025-02-24T15:09:14.367977941Z"
diff --git a/bitnami/mlflow/Chart.yaml b/bitnami/mlflow/Chart.yaml
@@ -6,42 +6,42 @@ annotations:
   licenses: Apache-2.0
   images: |
     - name: git
-      image: docker.io/bitnami/git:2.48.1-debian-12-r3
+      image: docker.io/bitnami/git:2.48.1-debian-12-r8
     - name: mlflow
-      image: docker.io/bitnami/mlflow:2.20.1-debian-12-r0
+      image: docker.io/bitnami/mlflow:2.20.2-debian-12-r3
     - name: os-shell
-      image: docker.io/bitnami/os-shell:12-debian-12-r36
+      image: docker.io/bitnami/os-shell:12-debian-12-r39
 apiVersion: v2
-appVersion: 2.20.1
+appVersion: 2.20.2
 dependencies:
-  - condition: minio.enabled
-    name: minio
-    repository: oci://registry-1.docker.io/bitnamicharts
-    version: 15.x.x
-  - condition: postgresql.enabled
-    name: postgresql
-    repository: oci://registry-1.docker.io/bitnamicharts
-    version: 16.x.x
-  - name: common
-    repository: oci://registry-1.docker.io/bitnamicharts
-    tags:
-      - bitnami-common
-    version: 2.x.x
+- condition: minio.enabled
+  name: minio
+  repository: oci://registry-1.docker.io/bitnamicharts
+  version: 15.x.x
+- condition: postgresql.enabled
+  name: postgresql
+  repository: oci://registry-1.docker.io/bitnamicharts
+  version: 16.x.x
+- name: common
+  repository: oci://registry-1.docker.io/bitnamicharts
+  tags:
+  - bitnami-common
+  version: 2.x.x
 description: MLflow is an open-source platform designed to manage the end-to-end machine learning lifecycle. It allows you to track experiments, package code into reproducible runs, and share and deploy models.
 home: https://bitnami.com
 icon: https://dyltqmyl993wv.cloudfront.net/assets/stacks/mlflow/img/mlflow-stack-220x234.png
 keywords:
-  - mlflow
-  - models
-  - python
-  - machine
-  - learning
+- mlflow
+- models
+- python
+- machine
+- learning
 maintainers:
-  - name: Broadcom, Inc. All Rights Reserved.
-    url: https://github.com/bitnami/charts
+- name: Broadcom, Inc. All Rights Reserved.
+  url: https://github.com/bitnami/charts
 name: mlflow
 sources:
-  - https://github.com/bitnami/charts/tree/main/bitnami/mlflow
-  - https://github.com/bitnami/containers/tree/main/bitnami/mlflow
-  - https://github.com/mlflow/mlflow
-version: 2.5.0
+- https://github.com/bitnami/charts/tree/main/bitnami/mlflow
+- https://github.com/bitnami/containers/tree/main/bitnami/mlflow
+- https://github.com/mlflow/mlflow
+version: 2.5.1
diff --git a/bitnami/mlflow/README.md b/bitnami/mlflow/README.md
@@ -177,9 +177,11 @@ To back up and restore Helm chart deployments on Kubernetes, you need to back up
 | `tracking.auth.enabled`                                      | Enable basic authentication                                                                                                                                                                                                         | `true`           |
 | `tracking.auth.username`                                     | Admin username                                                                                                                                                                                                                      | `user`           |
 | `tracking.auth.password`                                     | Admin password                                                                                                                                                                                                                      | `""`             |
+| `tracking.auth.flaskServerSecretKey`                         | Flask server secret key (required for enabling CSRF protection)                                                                                                                                                                     | `""`             |
 | `tracking.auth.existingSecret`                               | Name of a secret containing the admin password                                                                                                                                                                                      | `""`             |
 | `tracking.auth.existingSecretUserKey`                        | Key inside the secret containing the admin password                                                                                                                                                                                 | `""`             |
 | `tracking.auth.existingSecretPasswordKey`                    | Key inside the secret containing the admin password                                                                                                                                                                                 | `""`             |
+| `tracking.auth.existingSecretFlaskServerSecretKey`           | Key inside the secret containing the flask server secret key                                                                                                                                                                        | `""`             |
 | `tracking.auth.extraOverrides`                               | Add extra settings to the basic_auth.ini file                                                                                                                                                                                       | `{}`             |
 | `tracking.auth.overridesConfigMap`                           | Name of a ConfigMap containing overrides to the basic_auth.ini file                                                                                                                                                                 | `""`             |
 | `tracking.tls.enabled`                                       | Enable TLS traffic support                                                                                                                                                                                                          | `false`          |

diff --git a/bitnami/mlflow/templates/_helpers.tpl b/bitnami/mlflow/templates/_helpers.tpl
@@ -64,14 +64,21 @@ Return the MLflow Tracking Secret Name
 Return the MLflow Tracking Secret key for the password
 */}}
 {{- define "mlflow.v0.tracking.passwordKey" -}}
-{{- coalesce .Values.tracking.auth.existingSecretPasswordKey "admin-password" -}}
+{{- default "admin-password" .Values.tracking.auth.existingSecretPasswordKey -}}
 {{- end -}}
 
 {{/*
 Return the MLflow Tracking Secret key for the user
 */}}
 {{- define "mlflow.v0.tracking.userKey" -}}
-{{- coalesce .Values.tracking.auth.existingSecretUserKey "admin-user" -}}
+{{- default "admin-user" .Values.tracking.auth.existingSecretUserKey -}}
+{{- end -}}
+
+{{/*
+Return the MLflow Tracking Secret key for the Flask Server secret key
+*/}}
+{{- define "mlflow.v0.tracking.flaskServerSecretKey" -}}
+{{- default .Values.tracking.auth.existingSecretFlaskServerSecretKey "flask-server-secret-key" -}}
 {{- end -}}
 
 {{/*

diff --git a/bitnami/mlflow/templates/tracking/auth-secret.yaml b/bitnami/mlflow/templates/tracking/auth-secret.yaml
@@ -16,7 +16,8 @@ metadata:
   annotations: {{- include "common.tplvalues.render" (dict "value" .Values.commonAnnotations "context" $) | nindent 4 }}
   {{- end }}
 data:
-  # We need to ad the username as it is required by the ServiceMonitor object
+  # We need to add the username as it is required by the ServiceMonitor object
   admin-user: {{ include "common.secrets.passwords.manage" (dict "secret" (include "mlflow.v0.tracking.fullname" .) "key" "admin-user" "providedValues" (list "tracking.auth.username") "context" $) }}
   admin-password: {{ include "common.secrets.passwords.manage" (dict "secret" (include "mlflow.v0.tracking.fullname" .) "key" "admin-password" "providedValues" (list "tracking.auth.password") "context" $) }}
+  flask-server-secret-key: {{ include "common.secrets.passwords.manage" (dict "secret" (include "mlflow.v0.tracking.fullname" .) "key" "flask-server-secret-key" "providedValues" (list "tracking.auth.flaskServerSecretKey") "context" $) }}
 {{- end }}
diff --git a/bitnami/mlflow/templates/tracking/deployment.yaml b/bitnami/mlflow/templates/tracking/deployment.yaml
@@ -175,6 +175,14 @@ spec:
           env:
             - name: BITNAMI_DEBUG
               value: {{ ternary "true" "false" (or .Values.image.debug .Values.diagnosticMode.enabled) | quote }}
+            {{- if .Values.tracking.auth.enabled }}
+            - name: MLFLOW_FLASK_SERVER_SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: {{ include "mlflow.v0.tracking.secretName" . }}
+                  key: {{ include "mlflow.v0.tracking.flaskServerSecretKey" . | quote }}
+            {{- end }}
+
             {{- if (include "mlflow.v0.database.enabled" .) }}
             - name: MLFLOW_DATABASE_PASSWORD
               valueFrom:

diff --git a/bitnami/mlflow/values.yaml b/bitnami/mlflow/values.yaml
@@ -95,7 +95,7 @@ diagnosticMode:
 image:
   registry: docker.io
   repository: bitnami/mlflow
-  tag: 2.20.1-debian-12-r0
+  tag: 2.20.2-debian-12-r3
   digest: ""
   ## Specify a imagePullPolicy
   ## ref: https://kubernetes.io/docs/concepts/containers/images/#pre-pulled-images
@@ -124,7 +124,7 @@ image:
 gitImage:
   registry: docker.io
   repository: bitnami/git
-  tag: 2.48.1-debian-12-r3
+  tag: 2.48.1-debian-12-r8
   digest: ""
   pullPolicy: IfNotPresent
   ## Optionally specify an array of imagePullSecrets.
@@ -265,18 +265,22 @@ tracking:
   ## @param tracking.auth.enabled Enable basic authentication
   ## @param tracking.auth.username Admin username
   ## @param tracking.auth.password Admin password
+  ## @param tracking.auth.flaskServerSecretKey Flask server secret key (required for enabling CSRF protection)
   ## @param tracking.auth.existingSecret Name of a secret containing the admin password
   ## @param tracking.auth.existingSecretUserKey Key inside the secret containing the admin password
   ## @param tracking.auth.existingSecretPasswordKey Key inside the secret containing the admin password
+  ## @param tracking.auth.existingSecretFlaskServerSecretKey Key inside the secret containing the flask server secret key
   ## @param tracking.auth.extraOverrides Add extra settings to the basic_auth.ini file
   ## @param tracking.auth.overridesConfigMap Name of a ConfigMap containing overrides to the basic_auth.ini file
   auth:
     enabled: true
     username: user
     password: ""
+    flaskServerSecretKey: ""
     existingSecret: ""
     existingSecretUserKey: ""
     existingSecretPasswordKey: ""
+    existingSecretFlaskServerSecretKey: ""
     extraOverrides: {}
     overridesConfigMap: ""
   ## TLS configuration
@@ -1220,7 +1224,7 @@ volumePermissions:
   image:
     registry: docker.io
     repository: bitnami/os-shell
-    tag: 12-debian-12-r36
+    tag: 12-debian-12-r39
     pullPolicy: IfNotPresent
     ## Optionally specify an array of imagePullSecrets.
     ## Secrets must be manually created in the namespace.
@@ -1269,7 +1273,7 @@ waitContainer:
   image:
     registry: docker.io
     repository: bitnami/os-shell
-    tag: 12-debian-12-r36
+    tag: 12-debian-12-r39
     digest: ""
     ## @param waitContainer.image.pullPolicy Init container wait-container image pull policy
     ##