trivy-operator helm

No introduction found. Create it?

More popular helm chart found

trivy-operator from aquasecurity/helm-charts/trivy-operator is more popular with 8 repositories.

Install

Install with:

helm repo add trivy-charts https://aquasecurity.github.io/helm-charts/
helm install trivy-operator trivy-charts/trivy-operator -f values.yaml

Examples

See examples from other people.

Top Repositories (0 out of 6)

NameRepoStarsVersionTimestamp

Values

See the most popular values for this chart:

KeyTypes
operator.scanJobsConcurrentLimit (6)
3
number
operator.replicas (4)
1
number
operator.builtInTrivyServer (3)
true
boolean
operator.configAuditScannerScanOnlyCurrentRevisions (3)
true
boolean
operator.sbomGenerationEnabled (3)
false
boolean
operator.scanJobTTL (3)
10s
string
operator.vulnerabilityScannerScanOnlyCurrentRevisions (3)
true
boolean
operator.annotations."reloader.stakater.com/auto" (2)
true
string
operator.clusterComplianceEnabled (2)
false
boolean
operator.scanJobTimeout (2)
20m
string
operator.cacheReportTTL (1)
168h
string
operator.configAuditScannerEnabled (1)
false
boolean
operator.exposedSecretScannerEnabled (1)
false
boolean
operator.infraAssessmentScannerEnabled (1)
false
boolean
operator.rbacAssessmentScannerEnabled (1)
false
boolean
operator.resources.limits.cpu (1)
1000m
string
operator.resources.limits.memory (1)
1Gi
string
operator.resources.requests.cpu (1)
200m
string
operator.resources.requests.memory (1)
512Mi
string
operator.scanJobsRetryDelay (1)
60s
string
operator.scannerReportTTL (1)
72h
string
operator.scanNodeCollectorLimit (1)
1
number
operator.webhookBroadcastURL (1)
${TRIVY_WEBHOOK_URL}
string
serviceMonitor.enabled (6)
true
boolean
serviceMonitor.additionalLabels.prometheus (1)
kube-prometheus-stack
string
serviceMonitor.interval (1)
30s
string
serviceMonitor.labels.release (1)
${prometheus_operator_app_name}
string
serviceMonitor.scrapeTimeout (1)
10s
string
trivy.ignoreUnfixed (6)
true
boolean
trivy.resources.limits.memory (4)
1Gi
string
trivy.resources.limits.cpu (3)
500m
string
trivy.resources.requests.cpu (4)
100m
string
trivy.resources.requests.memory (3)
146Mi
string
trivy.severity (4)
HIGH,CRITICAL
string
trivy.mode (3)
ClientServer
string
trivy.slow (3)
true
boolean
trivy.storageClassEnabled (2)
false
boolean
trivy.serverTokenSecretName (1)
trivy-server-secret
string
trivy.storageClassName (1)
local-path
string
trivy.timeout (1)
15m0s
string
excludeNamespaces (3)
kube-system,flux-system,cert-manager,volsync-system
string
nodeCollector.useNodeSelector (2)
false
boolean
nodeCollector.enabled (1)
false
boolean
nodeCollector.excludeNodes (1)
kubernetes.io/os=linux
string
nodeCollector.resources.limits.cpu (1)
200m
string
nodeCollector.resources.limits.memory (1)
128Mi
string
nodeCollector.resources.requests.cpu (1)
50m
string
nodeCollector.resources.requests.memory (1)
64Mi
string
nodeCollector.volumeMounts[].mountPath (1)
/var/lib/etcd
/var/lib/kubelet
/var/lib/kube-scheduler
/var/lib/kube-controller-manager
string
nodeCollector.volumeMounts[].name (1)
var-lib-etcd
var-lib-kubelet
var-lib-kube-scheduler
var-lib-kube-controller-manager
string
nodeCollector.volumeMounts[].readOnly (1)
true
true
true
true
boolean
nodeCollector.volumes[].hostPath.path (1)
/var/lib/etcd
/var/lib/kubelet
/var/lib/kube-scheduler
/var/lib/kube-controller-manager
string
nodeCollector.volumes[].name (1)
var-lib-etcd
var-lib-kubelet
var-lib-kube-scheduler
var-lib-kube-controller-manager
string
resources.limits.memory (2)
512Mi
string
resources.requests.cpu (2)
25m
string
resources.requests.memory (2)
128Mi
string
trivyOperator.excludeImages (2)
quay.io/backube/*
string
trivyOperator.skipResourceByLabels (2)
app.kubernetes.io/created-by=volsync
string
trivyOperator.resources.limits.cpu (1)
35m
string
trivyOperator.resources.limits.memory (1)
1536Mi
string
trivyOperator.resources.requests.cpu (1)
23m
string
trivyOperator.resources.requests.memory (1)
1152Mi
string
trivyOperator.scanJobAnnotations (1)
k8tz.io/inject=false
string
trivyOperator.scanJobPodTemplateContainerSecurityContext.allowPrivilegeEscalation (1)
false
boolean
trivyOperator.scanJobPodTemplateContainerSecurityContext.capabilities.drop[] (1)
- ALL
string
trivyOperator.scanJobPodTemplateContainerSecurityContext.readOnlyRootFilesystem (1)
true
boolean
trivyOperator.scanJobPodTemplateContainerSecurityContext.runAsGroup (1)
10000
number
trivyOperator.scanJobPodTemplateContainerSecurityContext.runAsNonRoot (1)
true
boolean
trivyOperator.scanJobPodTemplateContainerSecurityContext.runAsUser (1)
10000
number
trivyOperator.scanJobPodTemplateContainerSecurityContext.seccompProfile.type (1)
RuntimeDefault
string
trivyOperator.scanJobPodTemplatePodSecurityContext.fsGroup (1)
10000
number
trivyOperator.scanJobPodTemplatePodSecurityContext.runAsGroup (1)
10000
number
trivyOperator.scanJobPodTemplatePodSecurityContext.runAsNonRoot (1)
true
boolean
trivyOperator.scanJobPodTemplatePodSecurityContext.runAsUser (1)
10000
number
trivyOperator.scanJobPodTemplatePodSecurityContext.seccompProfile.type (1)
RuntimeDefault
string
alternateReportStorage.enabled (1)
true
boolean
alternateReportStorage.mountPath (1)
/mnt/data/trivy-operator
string
alternateReportStorage.podSecurityContext.fsGroup (1)
1001
number
alternateReportStorage.podSecurityContext.runAsUser (1)
1001
number
alternateReportStorage.storage (1)
10Gi
string
alternateReportStorage.storageClassName (1)
truenas-nfs
string
alternateReportStorage.volumeName (1)
trivy-operator-pvc
string
commonLabels.cluster (1)
middle-earth-cluster
string
compliance.cron (1)
0 0 * * *
string
compliance.enabled (1)
true
boolean
configAudit.enabled (1)
true
boolean
exposedSecretReport.enabled (1)
true
boolean
infraAssessment.enabled (1)
true
boolean
namespaceOverride (1)
trivy-system
string
podAnnotations."k8tz.io/inject" (1)
false
string
podSecurityContext.fsGroup (1)
10000
number
podSecurityContext.runAsGroup (1)
10000
number
podSecurityContext.runAsNonRoot (1)
true
boolean
podSecurityContext.runAsUser (1)
10000
number
podSecurityContext.seccompProfile.type (1)
RuntimeDefault
string
rbacAssessment.enabled (1)
true
boolean
securityContext.allowPrivilegeEscalation (1)
false
boolean
securityContext.capabilities.drop[] (1)
- ALL
string
securityContext.readOnlyRootFilesystem (1)
true
boolean
securityContext.runAsGroup (1)
10000
number
securityContext.runAsNonRoot (1)
true
boolean
securityContext.runAsUser (1)
10000
number
securityContext.seccompProfile.type (1)
RuntimeDefault
string
vulnerabilityReports.scanner (1)
Trivy
string