remove trivy
This commit is contained in:
@@ -1,6 +0,0 @@
|
|||||||
dependencies:
|
|
||||||
- name: trivy-operator
|
|
||||||
repository: https://aquasecurity.github.io/helm-charts/
|
|
||||||
version: 0.31.0
|
|
||||||
digest: sha256:5a71d5ff43d5e36ea500c5dcade70cddc874621ad49ffe7c10ba202a14b9c87f
|
|
||||||
generated: "2025-12-01T19:56:01.513264-06:00"
|
|
||||||
@@ -1,23 +0,0 @@
|
|||||||
apiVersion: v2
|
|
||||||
name: trivy
|
|
||||||
version: 1.0.0
|
|
||||||
description: Trivy
|
|
||||||
keywords:
|
|
||||||
- trivy
|
|
||||||
- vulnerability
|
|
||||||
- monitoring
|
|
||||||
- kubernetes
|
|
||||||
home: https://wiki.alexlebens.dev/s/5cffa529-4c2e-4126-99eb-cc4aeb5a49b3
|
|
||||||
sources:
|
|
||||||
- https://github.com/aquasecurity/trivy
|
|
||||||
- https://github.com/aquasecurity/trivy-operator
|
|
||||||
- https://github.com/aquasecurity/trivy-operator/tree/main/deploy/helm
|
|
||||||
maintainers:
|
|
||||||
- name: alexlebens
|
|
||||||
dependencies:
|
|
||||||
- name: trivy-operator
|
|
||||||
version: 0.31.0
|
|
||||||
repository: https://aquasecurity.github.io/helm-charts/
|
|
||||||
icon: https://raw.githubusercontent.com/aquasecurity/trivy/main/docs/imgs/logo.png
|
|
||||||
# renovate: github=aquasecurity/trivy
|
|
||||||
appVersion: 0.31.0
|
|
||||||
@@ -1,11 +0,0 @@
|
|||||||
apiVersion: v1
|
|
||||||
kind: Namespace
|
|
||||||
metadata:
|
|
||||||
name: trivy
|
|
||||||
labels:
|
|
||||||
app.kubernetes.io/name: trivy
|
|
||||||
app.kubernetes.io/instance: {{ .Release.Name }}
|
|
||||||
app.kubernetes.io/part-of: {{ .Release.Name }}
|
|
||||||
pod-security.kubernetes.io/audit: privileged
|
|
||||||
pod-security.kubernetes.io/enforce: privileged
|
|
||||||
pod-security.kubernetes.io/warn: privileged
|
|
||||||
@@ -1,105 +0,0 @@
|
|||||||
trivy-operator:
|
|
||||||
targetWorkloads: "pod,replicaset,replicationcontroller,statefulset,daemonset,cronjob,job"
|
|
||||||
operator:
|
|
||||||
replicas: 1
|
|
||||||
vulnerabilityScannerEnabled: false
|
|
||||||
sbomGenerationEnabled: false
|
|
||||||
clusterSbomCacheEnabled: false
|
|
||||||
configAuditScannerEnabled: false
|
|
||||||
rbacAssessmentScannerEnabled: false
|
|
||||||
infraAssessmentScannerEnabled: false
|
|
||||||
clusterComplianceEnabled: false
|
|
||||||
serviceMonitor:
|
|
||||||
enabled: true
|
|
||||||
trivy:
|
|
||||||
createConfig: true
|
|
||||||
image:
|
|
||||||
registry: mirror.gcr.io
|
|
||||||
repository: aquasec/trivy
|
|
||||||
tag: 0.68.2
|
|
||||||
storageClassEnabled: true
|
|
||||||
storageClassName: ceph-block
|
|
||||||
storageSize: "5Gi"
|
|
||||||
registry:
|
|
||||||
mirror:
|
|
||||||
"registry-1.docker.io": proxy-registry-1.docker.io
|
|
||||||
"quay.io": proxy-quay.io
|
|
||||||
"registry.k8s.io": proxy-registry.k8s
|
|
||||||
"gcr.io": proxy-gcr.io
|
|
||||||
"ghcr.io": proxy-ghcr.io
|
|
||||||
"hub.docker": proxy-hub.docker
|
|
||||||
severity: UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL
|
|
||||||
slow: true
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
cpu: 100m
|
|
||||||
memory: 128M
|
|
||||||
supportedConfigAuditKinds: "Workload,Service,Role,ClusterRole,NetworkPolicy,Ingress,LimitRange,ResourceQuota"
|
|
||||||
server:
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
cpu: 200m
|
|
||||||
memory: 512Mi
|
|
||||||
replicas: 1
|
|
||||||
compliance:
|
|
||||||
reportType: summary
|
|
||||||
cron: 0 5 * * *
|
|
||||||
specs:
|
|
||||||
- k8s-cis-1.23
|
|
||||||
- k8s-nsa-1.0
|
|
||||||
- k8s-pss-baseline-0.1
|
|
||||||
- k8s-pss-restricted-0.1
|
|
||||||
volumeMounts:
|
|
||||||
- mountPath: /tmp
|
|
||||||
name: cache-policies
|
|
||||||
readOnly: false
|
|
||||||
volumes:
|
|
||||||
- name: cache-policies
|
|
||||||
emptyDir: {}
|
|
||||||
resources:
|
|
||||||
requests:
|
|
||||||
cpu: 100m
|
|
||||||
memory: 128Mi
|
|
||||||
nodeCollector:
|
|
||||||
tolerations:
|
|
||||||
- key: node-role.kubernetes.io/control-plane
|
|
||||||
operator: Exists
|
|
||||||
effect: NoSchedule
|
|
||||||
volumeMounts:
|
|
||||||
- name: var-lib-etcd
|
|
||||||
mountPath: /var/lib/etcd
|
|
||||||
readOnly: true
|
|
||||||
- name: var-lib-kubelet
|
|
||||||
mountPath: /var/lib/kubelet
|
|
||||||
readOnly: true
|
|
||||||
- name: var-lib-kube-scheduler
|
|
||||||
mountPath: /var/lib/kube-scheduler
|
|
||||||
readOnly: true
|
|
||||||
- name: var-lib-kube-controller-manager
|
|
||||||
mountPath: /var/lib/kube-controller-manager
|
|
||||||
readOnly: true
|
|
||||||
- name: etc-kubernetes
|
|
||||||
mountPath: /etc/kubernetes
|
|
||||||
readOnly: true
|
|
||||||
- name: etc-cni-netd
|
|
||||||
mountPath: /etc/cni/net.d/
|
|
||||||
readOnly: true
|
|
||||||
volumes:
|
|
||||||
- name: var-lib-etcd
|
|
||||||
hostPath:
|
|
||||||
path: /var/lib/etcd
|
|
||||||
- name: var-lib-kubelet
|
|
||||||
hostPath:
|
|
||||||
path: /var/lib/kubelet
|
|
||||||
- name: var-lib-kube-scheduler
|
|
||||||
hostPath:
|
|
||||||
path: /var/lib/kube-scheduler
|
|
||||||
- name: var-lib-kube-controller-manager
|
|
||||||
hostPath:
|
|
||||||
path: /var/lib/kube-controller-manager
|
|
||||||
- name: etc-kubernetes
|
|
||||||
hostPath:
|
|
||||||
path: /etc/kubernetes
|
|
||||||
- name: etc-cni-netd
|
|
||||||
hostPath:
|
|
||||||
path: /etc/cni/net.d/
|
|
||||||
Reference in New Issue
Block a user