Update Trivy configuration paths in Ansible tasks and Argo CD application manifests to reflect new directory structure. Adjust references in values.yaml and dashboard-values.yaml for consistency and clarity in deployment processes.
This commit is contained in:
@@ -56,7 +56,7 @@
|
|||||||
- kubectl
|
- kubectl
|
||||||
- apply
|
- apply
|
||||||
- -f
|
- -f
|
||||||
- "{{ noble_repo_root }}/clusters/noble/bootstrap/trivy/namespace.yaml"
|
- "{{ noble_repo_root }}/clusters/noble/apps/trivy/namespace.yaml"
|
||||||
environment:
|
environment:
|
||||||
KUBECONFIG: "{{ noble_kubeconfig }}"
|
KUBECONFIG: "{{ noble_kubeconfig }}"
|
||||||
changed_when: true
|
changed_when: true
|
||||||
@@ -74,7 +74,7 @@
|
|||||||
- --version
|
- --version
|
||||||
- "{{ noble_trivy_chart_version }}"
|
- "{{ noble_trivy_chart_version }}"
|
||||||
- -f
|
- -f
|
||||||
- "{{ noble_repo_root }}/clusters/noble/bootstrap/trivy/values.yaml"
|
- "{{ noble_repo_root }}/clusters/noble/apps/trivy/values.yaml"
|
||||||
- --force-conflicts
|
- --force-conflicts
|
||||||
- --wait
|
- --wait
|
||||||
- --timeout
|
- --timeout
|
||||||
|
|||||||
@@ -5,7 +5,7 @@
|
|||||||
# Sync **noble-trivy-operator** first so CRDs and reports exist. DNS: host below → Traefik LB.
|
# Sync **noble-trivy-operator** first so CRDs and reports exist. DNS: host below → Traefik LB.
|
||||||
|
|
||||||
kubernetes:
|
kubernetes:
|
||||||
# Match **clusters/noble/bootstrap/trivy/values.yaml** operator feature flags (no SBOM / cluster compliance cache).
|
# Match **clusters/noble/apps/trivy/values.yaml** operator feature flags (no SBOM / cluster compliance cache).
|
||||||
trivyUseClusterComplianceReport: false
|
trivyUseClusterComplianceReport: false
|
||||||
trivyUseClusterSbomReport: false
|
trivyUseClusterSbomReport: false
|
||||||
trivyUseClusterVulnerabilityReport: false
|
trivyUseClusterVulnerabilityReport: false
|
||||||
|
|||||||
@@ -6,9 +6,9 @@
|
|||||||
#
|
#
|
||||||
# Manual Helm (if not using Argo):
|
# Manual Helm (if not using Argo):
|
||||||
# helm repo add aqua https://aquasecurity.github.io/helm-charts/ && helm repo update
|
# helm repo add aqua https://aquasecurity.github.io/helm-charts/ && helm repo update
|
||||||
# kubectl apply -f clusters/noble/bootstrap/trivy/namespace.yaml
|
# kubectl apply -f clusters/noble/apps/trivy/namespace.yaml
|
||||||
# helm upgrade --install trivy-operator aqua/trivy-operator -n trivy-system \
|
# helm upgrade --install trivy-operator aqua/trivy-operator -n trivy-system \
|
||||||
# --version 0.32.1 -f clusters/noble/bootstrap/trivy/values.yaml --wait --timeout 15m
|
# --version 0.32.1 -f clusters/noble/apps/trivy/values.yaml --wait --timeout 15m
|
||||||
#
|
#
|
||||||
# Inspect: kubectl get vulnerabilityreports,configauditreports -A
|
# Inspect: kubectl get vulnerabilityreports,configauditreports -A
|
||||||
# Docs: https://aquasecurity.github.io/trivy-operator/
|
# Docs: https://aquasecurity.github.io/trivy-operator/
|
||||||
|
|||||||
@@ -15,7 +15,7 @@ spec:
|
|||||||
helm:
|
helm:
|
||||||
releaseName: trivy-operator-dashboard
|
releaseName: trivy-operator-dashboard
|
||||||
valueFiles:
|
valueFiles:
|
||||||
- $values/clusters/noble/bootstrap/trivy/dashboard-values.yaml
|
- $values/clusters/noble/apps/trivy/dashboard-values.yaml
|
||||||
- repoURL: https://gitea.pcenicni.ca/gsdavidp/home-server.git
|
- repoURL: https://gitea.pcenicni.ca/gsdavidp/home-server.git
|
||||||
targetRevision: HEAD
|
targetRevision: HEAD
|
||||||
ref: values
|
ref: values
|
||||||
|
|||||||
@@ -15,7 +15,7 @@ spec:
|
|||||||
helm:
|
helm:
|
||||||
releaseName: trivy-operator
|
releaseName: trivy-operator
|
||||||
valueFiles:
|
valueFiles:
|
||||||
- $values/clusters/noble/bootstrap/trivy/values.yaml
|
- $values/clusters/noble/apps/trivy/values.yaml
|
||||||
- repoURL: https://gitea.pcenicni.ca/gsdavidp/home-server.git
|
- repoURL: https://gitea.pcenicni.ca/gsdavidp/home-server.git
|
||||||
targetRevision: HEAD
|
targetRevision: HEAD
|
||||||
ref: values
|
ref: values
|
||||||
|
|||||||
Reference in New Issue
Block a user