From 0edf6ee2d34e3c88277f71269d4f362cfc871798 Mon Sep 17 00:00:00 2001
From: Bitnami Bot <bitnami.bot@broadcom.com>
Date: Wed, 1 Apr 2026 14:01:38 +0200
Subject: [PATCH] [bitnami/cloudnative-pg] Release 1.29.0-debian-12-r0 (#91927)

Signed-off-by: Bitnami Bot <bitnami.bot@broadcom.com>
---
 bitnami/cloudnative-pg/1/debian-12/Dockerfile | 10 +++----
 bitnami/cloudnative-pg/README.md              | 28 ++++++-------------
 2 files changed, 14 insertions(+), 24 deletions(-)

diff --git a/bitnami/cloudnative-pg/1/debian-12/Dockerfile b/bitnami/cloudnative-pg/1/debian-12/Dockerfile
index a495afd500de..1450449083bb 100644
--- a/bitnami/cloudnative-pg/1/debian-12/Dockerfile
+++ b/bitnami/cloudnative-pg/1/debian-12/Dockerfile
@@ -17,7 +17,7 @@ RUN --mount=type=secret,id=downloads_url,env=SECRET_DOWNLOADS_URL \
     DOWNLOADS_URL=${SECRET_DOWNLOADS_URL:-${DOWNLOADS_URL}} ; \
     mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ || exit 1 ; \
     COMPONENTS=( \
-      "cloudnative-pg-1.28.1-1-linux-${OS_ARCH}-debian-12" \
+      "cloudnative-pg-1.29.0-0-linux-${OS_ARCH}-debian-12" \
     ) ; \
     for COMPONENT in "${COMPONENTS[@]}"; do \
       if [ ! -f "${COMPONENT}.tar.gz" ]; then \
@@ -40,11 +40,11 @@ ARG TARGETARCH
 ENV OS_ARCH="${TARGETARCH:-amd64}"
 
 LABEL org.opencontainers.image.base.name="scratch" \
-      org.opencontainers.image.created="2026-03-06T03:16:56Z" \
+      org.opencontainers.image.created="2026-04-01T11:54:32Z" \
       org.opencontainers.image.description="Application packaged by Broadcom, Inc." \
       org.opencontainers.image.title="cloudnative-pg" \
       org.opencontainers.image.vendor="Broadcom, Inc." \
-      org.opencontainers.image.version="1.28.1"
+      org.opencontainers.image.version="1.29.0"
 
 COPY rootfs /
 COPY --from=builder /opt/bitnami/cloudnative-pg/manager /manager
@@ -52,9 +52,9 @@ COPY --from=builder /opt/bitnami/cloudnative-pg/bin /operator
 COPY --from=builder /opt/bitnami/cloudnative-pg/.spdx-cloudnative-pg.spdx /opt/bitnami/cloudnative-pg/.spdx-cloudnative-pg.spdx
 COPY --from=builder /opt/bitnami/cloudnative-pg/licenses /opt/bitnami/cloudnative-pg/licenses
 
-ENV APP_VERSION="1.28.1" \
+ENV APP_VERSION="1.29.0" \
     BITNAMI_APP_NAME="cloudnative-pg" \
-    IMAGE_REVISION="1" \
+    IMAGE_REVISION="0" \
     PATH="/operator:$PATH"
 
 USER 1001
diff --git a/bitnami/cloudnative-pg/README.md b/bitnami/cloudnative-pg/README.md
index 7808962909fe..deb74499a825 100644
--- a/bitnami/cloudnative-pg/README.md
+++ b/bitnami/cloudnative-pg/README.md
@@ -34,25 +34,7 @@ Learn more about the Bitnami tagging policy and the difference between rolling t
 
 ## Get this image
 
-The recommended way to get the Bitnami cloudnative-pg Docker Image is to pull the prebuilt image from the [Docker Hub Registry](https://hub.docker.com/r/bitnami/cloudnative-pg).
-
-```console
-docker pull bitnami/cloudnative-pg:latest
-```
-
-To use a specific version, you can pull a versioned tag. You can view the [list of available versions](https://hub.docker.com/r/bitnami/cloudnative-pg/tags/) in the Docker Hub Registry.
-
-```console
-docker pull bitnami/cloudnative-pg:[TAG]
-```
-
-If you wish, you can also build the image yourself by cloning the repository, changing to the directory containing the Dockerfile and executing the `docker build` command. Remember to replace the `APP`, `VERSION` and `OPERATING-SYSTEM` path placeholders in the example command below with the correct values.
-
-```console
-git clone https://github.com/bitnami/containers.git
-cd bitnami/APP/VERSION/OPERATING-SYSTEM
-docker build -t bitnami/APP:latest .
-```
+The Bitnami CloudNativePG Docker image is only available to [Bitnami Secure Images](https://bitnami.com) customers.
 
 ## Why use a non-root container?
 
@@ -72,6 +54,14 @@ docker run --rm --name cloudnative-pg bitnami/cloudnative-pg:latest --  --help
 
 Check the [official CloudNativePG documentation](https://cloudnative-pg.io//tree/main/docs) for more information.
 
+
+### FIPS configuration in Bitnami Secure Images
+
+The Bitnami CloudNativePG Docker image from the [Bitnami Secure Images](https://go-vmware.broadcom.com/contact-us) catalog includes extra features and settings to configure the container with FIPS capabilities. You can configure the next environment variables:
+
+- `OPENSSL_FIPS`: whether OpenSSL runs in FIPS mode or not. `yes` (default), `no`.
+- `GODEBUG`: controls Go FIPS mode. Use `fips140=only` (restricted), `fips140=on` (relaxed), or `fips140=off` (disabled).
+
 ## License
 
 Copyright &copy; 2026 Broadcom. The term "Broadcom" refers to Broadcom Inc. and/or its subsidiaries.