Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

DRAFT - Kubescape scans #58

Closed
wants to merge 2 commits into from
Closed
Show file tree
Hide file tree
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Next Next commit
wip
  • Loading branch information
RothAndrew committed Sep 21, 2021
commit 4f72b4ce04da75ebee786b1d6679e08f50475d0b
3 changes: 2 additions & 1 deletion examples/big-bang/template/bigbang/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,8 @@ flux:
cleanupOnFail: false

networkPolicies:
enabled: false
enabled: true
controlPlaneCidr: 0.0.0.0/0
# controlPlaneCidr: 10.43.0.0/16

logging:
Expand Down
1 change: 1 addition & 0 deletions examples/big-bang/zarf.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -61,5 +61,6 @@ remote:
- registry1.dso.mil/ironbank/opensource/prometheus/node-exporter:v1.0.1
- registry1.dso.mil/ironbank/opensource/prometheus/prometheus:v2.25.0
- registry1.dso.mil/ironbank/twistlock/console/console:21.04.412
- registry1.dso.mil/ironbank/big-bang/base:8.4


9 changes: 8 additions & 1 deletion zarf.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ local:

features:
- name: management
description: "Add the K9s terminal-based K8s UI for cluster management"
description: "Add terminal-based K8s tools for cluster management"
default: true
files:
- source: https://zarf-public.s3-us-gov-west-1.amazonaws.com/k9s_Linux_x86_64_v0_24_11
Expand All @@ -38,6 +38,13 @@ features:
executable: true
- source: assets/misc/k9s-theme.yaml
target: "/root/.k9s/skin.yml"
- source: https://github.com/armosec/kubescape/releases/download/v1.0.81/kubescape-ubuntu-latest
shasum: a1caf4805f6a0e1e4bf0c0549fea7e822f2b7f8999913f8cfdbcb5316843a443
target: "/usr/local/bin/kubescape"
executable: true
- source: https://github.com/armosec/regolibrary/releases/download/v1.0.11/nsa
shasum: 52299bd5a2df28b6a6ff9926e09abd0fa5e6c1094f5bb75b036a0452cfc00dfa
target: "/usr/local/bin/kubescape-framework-nsa.json"

- name: logging
description: "Add Promtail, Grafana and Loki (PGL) to this cluster for log monitoring."
Expand Down