From e67558fb2b95dacaf6449aad6c98bf53be63331e Mon Sep 17 00:00:00 2001
From: Bitnami Bot <bitnami.bot@broadcom.com>
Date: Wed, 24 Sep 2025 15:10:03 +0200
Subject: [PATCH] [bitnami/clickhouse] Release 25.8.6-debian-12-r0 (#86324)

Signed-off-by: Bitnami Bot <bitnami.bot@broadcom.com>
---
 bitnami/clickhouse/25/debian-12/Dockerfile | 8 ++++----
 bitnami/clickhouse/README.md               | 6 ++++++
 2 files changed, 10 insertions(+), 4 deletions(-)

diff --git a/bitnami/clickhouse/25/debian-12/Dockerfile b/bitnami/clickhouse/25/debian-12/Dockerfile
index e65c4aec9a98..4db7bcd341c7 100644
--- a/bitnami/clickhouse/25/debian-12/Dockerfile
+++ b/bitnami/clickhouse/25/debian-12/Dockerfile
@@ -7,13 +7,13 @@ ARG DOWNLOADS_URL="downloads.bitnami.com/files/stacksmith"
 ARG TARGETARCH
 
 LABEL org.opencontainers.image.base.name="docker.io/bitnami/minideb:bookworm" \
-      org.opencontainers.image.created="2025-09-23T14:51:01Z" \
+      org.opencontainers.image.created="2025-09-24T12:58:48Z" \
       org.opencontainers.image.description="Application packaged by Broadcom, Inc." \
       org.opencontainers.image.documentation="https://github.com/bitnami/containers/tree/main/bitnami/clickhouse/README.md" \
       org.opencontainers.image.source="https://github.com/bitnami/containers/tree/main/bitnami/clickhouse" \
       org.opencontainers.image.title="clickhouse" \
       org.opencontainers.image.vendor="Broadcom, Inc." \
-      org.opencontainers.image.version="25.8.5"
+      org.opencontainers.image.version="25.8.6"
 
 ENV HOME="/" \
     OS_ARCH="${TARGETARCH:-amd64}" \
@@ -28,7 +28,7 @@ RUN --mount=type=secret,id=downloads_url,env=SECRET_DOWNLOADS_URL \
     DOWNLOADS_URL=${SECRET_DOWNLOADS_URL:-${DOWNLOADS_URL}} ; \
     mkdir -p /tmp/bitnami/pkg/cache/ ; cd /tmp/bitnami/pkg/cache/ || exit 1 ; \
     COMPONENTS=( \
-      "clickhouse-25.8.5-0-linux-${OS_ARCH}-debian-12" \
+      "clickhouse-25.8.6-0-linux-${OS_ARCH}-debian-12" \
     ) ; \
     for COMPONENT in "${COMPONENTS[@]}"; do \
       if [ ! -f "${COMPONENT}.tar.gz" ]; then \
@@ -47,7 +47,7 @@ RUN uninstall_packages curl
 
 COPY rootfs /
 RUN /opt/bitnami/scripts/clickhouse/postunpack.sh
-ENV APP_VERSION="25.8.5" \
+ENV APP_VERSION="25.8.6" \
     BITNAMI_APP_NAME="clickhouse" \
     IMAGE_REVISION="0" \
     PATH="/opt/bitnami/clickhouse/bin:/opt/bitnami/common/bin:$PATH" \
diff --git a/bitnami/clickhouse/README.md b/bitnami/clickhouse/README.md
index 90fbb6e5f8b0..f07bf10a9f3e 100644
--- a/bitnami/clickhouse/README.md
+++ b/bitnami/clickhouse/README.md
@@ -274,6 +274,12 @@ services:
   ...
 ```
 
+### FIPS configuration in Bitnami Secure Images
+
+The Bitnami ClickHouse Docker image from the [Bitnami Secure Images](https://www.arrow.com/globalecs/uk/products/bitnami-secure-images/) catalog includes extra features and settings to configure the container with FIPS capabilities. You can configure the next environment variables:
+
+- `OPENSSL_FIPS`: whether OpenSSL runs in FIPS mode or not. `yes` (default), `no`.
+
 ## Logging
 
 The Bitnami ClickHouse Docker image sends the container logs to `stdout`. To view the logs: