Add Trivy integration to noble cluster setup, including namespace and application configurations. Update README and playbook tags to reflect new security scanning capabilities. Enhance Longhorn and kube-prometheus-stack deployment reliability with increased timeout settings and retry mechanisms.

This commit is contained in:
Nikholas Pcenicni
2026-05-13 23:48:12 -04:00
parent 774b97894c
commit 663ebc5001
16 changed files with 223 additions and 13 deletions

View File

@@ -0,0 +1,33 @@
---
- name: Apply trivy-system namespace (PSA)
ansible.builtin.command:
argv:
- kubectl
- apply
- -f
- "{{ noble_repo_root }}/clusters/noble/bootstrap/trivy/namespace.yaml"
environment:
KUBECONFIG: "{{ noble_kubeconfig }}"
changed_when: true
- name: Install Trivy Operator
ansible.builtin.command:
argv:
- helm
- upgrade
- --install
- trivy-operator
- aqua/trivy-operator
- -n
- trivy-system
- --version
- "{{ noble_trivy_chart_version }}"
- -f
- "{{ noble_repo_root }}/clusters/noble/bootstrap/trivy/values.yaml"
- --force-conflicts
- --wait
- --timeout
- "{{ noble_helm_trivy_wait_timeout }}"
environment:
KUBECONFIG: "{{ noble_kubeconfig }}"
changed_when: true