diff --git a/clusters/cl01tl/helm/trivy/Chart.lock b/clusters/cl01tl/helm/trivy/Chart.lock deleted file mode 100644 index b2bd42d6d..000000000 --- a/clusters/cl01tl/helm/trivy/Chart.lock +++ /dev/null @@ -1,6 +0,0 @@ -dependencies: -- name: trivy-operator - repository: https://aquasecurity.github.io/helm-charts/ - version: 0.31.0 -digest: sha256:5a71d5ff43d5e36ea500c5dcade70cddc874621ad49ffe7c10ba202a14b9c87f -generated: "2025-12-01T19:56:01.513264-06:00" diff --git a/clusters/cl01tl/helm/trivy/Chart.yaml b/clusters/cl01tl/helm/trivy/Chart.yaml deleted file mode 100644 index a572d303d..000000000 --- a/clusters/cl01tl/helm/trivy/Chart.yaml +++ /dev/null @@ -1,23 +0,0 @@ -apiVersion: v2 -name: trivy -version: 1.0.0 -description: Trivy -keywords: - - trivy - - vulnerability - - monitoring - - kubernetes -home: https://wiki.alexlebens.dev/s/5cffa529-4c2e-4126-99eb-cc4aeb5a49b3 -sources: - - https://github.com/aquasecurity/trivy - - https://github.com/aquasecurity/trivy-operator - - https://github.com/aquasecurity/trivy-operator/tree/main/deploy/helm -maintainers: - - name: alexlebens -dependencies: - - name: trivy-operator - version: 0.31.0 - repository: https://aquasecurity.github.io/helm-charts/ -icon: https://raw.githubusercontent.com/aquasecurity/trivy/main/docs/imgs/logo.png -# renovate: github=aquasecurity/trivy -appVersion: 0.31.0 diff --git a/clusters/cl01tl/helm/trivy/templates/namespace.yaml b/clusters/cl01tl/helm/trivy/templates/namespace.yaml deleted file mode 100644 index eb7c54ed8..000000000 --- a/clusters/cl01tl/helm/trivy/templates/namespace.yaml +++ /dev/null @@ -1,11 +0,0 @@ -apiVersion: v1 -kind: Namespace -metadata: - name: trivy - labels: - app.kubernetes.io/name: trivy - app.kubernetes.io/instance: {{ .Release.Name }} - app.kubernetes.io/part-of: {{ .Release.Name }} - pod-security.kubernetes.io/audit: privileged - pod-security.kubernetes.io/enforce: privileged - pod-security.kubernetes.io/warn: privileged diff --git a/clusters/cl01tl/helm/trivy/values.yaml b/clusters/cl01tl/helm/trivy/values.yaml deleted file mode 100644 index 01434369f..000000000 --- a/clusters/cl01tl/helm/trivy/values.yaml +++ /dev/null @@ -1,105 +0,0 @@ -trivy-operator: - targetWorkloads: "pod,replicaset,replicationcontroller,statefulset,daemonset,cronjob,job" - operator: - replicas: 1 - vulnerabilityScannerEnabled: false - sbomGenerationEnabled: false - clusterSbomCacheEnabled: false - configAuditScannerEnabled: false - rbacAssessmentScannerEnabled: false - infraAssessmentScannerEnabled: false - clusterComplianceEnabled: false - serviceMonitor: - enabled: true - trivy: - createConfig: true - image: - registry: mirror.gcr.io - repository: aquasec/trivy - tag: 0.68.2 - storageClassEnabled: true - storageClassName: ceph-block - storageSize: "5Gi" - registry: - mirror: - "registry-1.docker.io": proxy-registry-1.docker.io - "quay.io": proxy-quay.io - "registry.k8s.io": proxy-registry.k8s - "gcr.io": proxy-gcr.io - "ghcr.io": proxy-ghcr.io - "hub.docker": proxy-hub.docker - severity: UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL - slow: true - resources: - requests: - cpu: 100m - memory: 128M - supportedConfigAuditKinds: "Workload,Service,Role,ClusterRole,NetworkPolicy,Ingress,LimitRange,ResourceQuota" - server: - resources: - requests: - cpu: 200m - memory: 512Mi - replicas: 1 - compliance: - reportType: summary - cron: 0 5 * * * - specs: - - k8s-cis-1.23 - - k8s-nsa-1.0 - - k8s-pss-baseline-0.1 - - k8s-pss-restricted-0.1 - volumeMounts: - - mountPath: /tmp - name: cache-policies - readOnly: false - volumes: - - name: cache-policies - emptyDir: {} - resources: - requests: - cpu: 100m - memory: 128Mi - nodeCollector: - tolerations: - - key: node-role.kubernetes.io/control-plane - operator: Exists - effect: NoSchedule - volumeMounts: - - name: var-lib-etcd - mountPath: /var/lib/etcd - readOnly: true - - name: var-lib-kubelet - mountPath: /var/lib/kubelet - readOnly: true - - name: var-lib-kube-scheduler - mountPath: /var/lib/kube-scheduler - readOnly: true - - name: var-lib-kube-controller-manager - mountPath: /var/lib/kube-controller-manager - readOnly: true - - name: etc-kubernetes - mountPath: /etc/kubernetes - readOnly: true - - name: etc-cni-netd - mountPath: /etc/cni/net.d/ - readOnly: true - volumes: - - name: var-lib-etcd - hostPath: - path: /var/lib/etcd - - name: var-lib-kubelet - hostPath: - path: /var/lib/kubelet - - name: var-lib-kube-scheduler - hostPath: - path: /var/lib/kube-scheduler - - name: var-lib-kube-controller-manager - hostPath: - path: /var/lib/kube-controller-manager - - name: etc-kubernetes - hostPath: - path: /etc/kubernetes - - name: etc-cni-netd - hostPath: - path: /etc/cni/net.d/