Skip to content

Commit

Permalink
image tag and other fixes
Browse files Browse the repository at this point in the history
Signed-off-by: Mritunjay Sharma <[email protected]>
  • Loading branch information
mritunjaysharma394 committed Feb 25, 2022
1 parent 188679b commit 5c90031
Show file tree
Hide file tree
Showing 4 changed files with 11 additions and 44 deletions.
23 changes: 0 additions & 23 deletions .github/worflows/release.yaml

This file was deleted.

16 changes: 6 additions & 10 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# kube-bench-adapter

![Version: 0.1.4](https://img.shields.io/badge/Version-0.1.4-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.16.0](https://img.shields.io/badge/AppVersion-1.16.0-informational?style=flat-square)
![Version: 0.1.5](https://img.shields.io/badge/Version-0.1.5-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.16.0](https://img.shields.io/badge/AppVersion-1.16.0-informational?style=flat-square)

The kube-bench adapter periodically runs a CIS benchmark check using cron-job with a tool called kube-bench and produces a cluster-wide policy report based on the Policy Report Custom Resource Definition

Expand Down Expand Up @@ -28,8 +28,8 @@ kubectl get clusterpolicyreports
| cronjob.schedule | string | `"\"*/2 * * * *\""` | cronjob schedule, default is 2 mins. |
| fullnameOverride | string | `""` | |
| image.pullPolicy | string | `"Always"` | |
| image.repository | string | `"ghcr.io/nirmata/kube-bench-adapter"` | image repository of kube-bench-adapter |
| image.tag | string | `"latest"` | tag of image repository of kube-bench-adapter |
| image.repository | string | `"mritunjay394/policyreport"` | image repository of kube-bench-adapter |
| image.tag | string | `"v0.1.0"` | tag of image repository of kube-bench-adapter |
| imagePullSecrets | list | `[]` | |
| ingress.annotations | object | `{}` | |
| ingress.enabled | bool | `false` | |
Expand All @@ -38,22 +38,18 @@ kubectl get clusterpolicyreports
| ingress.hosts[0].paths[0].backend.servicePort | int | `80` | |
| ingress.hosts[0].paths[0].path | string | `"/"` | |
| ingress.tls | list | `[]` | |
| kubeBench.benchmark | string | `"cis-1.6"` | specify the benchmark for kube-bench job, allowed values:cis-1.5, cis-1.6, gke-1.0, eks-1.0, ack-1.0 |
| kubeBench.category | string | `"CIS Benchmarks"` | category of the policy report |
| kubeBench.command | string | `"policyreport"` | |
| kubeBench.kubebenchImg | string | `"aquasec/kube-bench:latest"` | kube-bench image used for the adapter |
| kubeBench.kubebenchImg | string | `"aquasec/kube-bench:v0.6.6"` | kube-bench image used for the adapter |
| kubeBench.kubeconfig | string | `"$HOME/.kube/config"` | absolute path to the kubeconfig file |
| kubeBench.name | string | `"kube-bench"` | name of kube-bench adapter cluster policy report |
| kubeBench.namespace | string | `"default"` | specifies namespace where kube-bench job will run |
| kubeBench.targets | string | `"master,node,etcd,policies"` | targets for benchmark of kube-bench job, multiple values allowed. |
| kubeBench.version | string | `"1.21"` | specify the Kubernetes version for kube-bench job |
| kubeBench.yaml | string | `"job.yaml"` | name of name of YAML for kube-bench job, allowed values: job.yaml, job-master.yaml, job-node.yaml, job-ack.yaml, job-aks.yaml, job-eks-asff.yaml, job-eks.yaml, job-gke.yaml, job-iks.yaml |
| kubeBench.provider | string | `"job.yaml"` | name of provider of YAML for kube-bench job, allowed values: job.yaml, job-master.yaml, job-node.yaml, job-ack.yaml, job-aks.yaml, job-eks-asff.yaml, job-eks.yaml, job-gke.yaml, job-iks.yaml |
| nameOverride | string | `""` | |
| rbac.create | bool | `true` | |
| replicaCount | int | `1` | |
| service.port | int | `80` | |
| service.type | string | `"NodePort"` | |
| serviceAccount.annotations | object | `{}` | |
| serviceAccount.create | bool | `true` | |
| serviceAccount.name | string | `""` | |

| serviceAccount.name | string | `""` | |
2 changes: 1 addition & 1 deletion charts/kube-bench-adapter/Chart.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ type: application
# This is the chart version. This version number should be incremented each time you make changes
# to the chart and its templates, including the app version.
# Versions are expected to follow Semantic Versioning (https://semver.org/)
version: 0.1.4
version: 0.1.5

# This is the version number of the application being deployed. This version number should be
# incremented each time you make changes to the application. Versions are not expected to
Expand Down
14 changes: 4 additions & 10 deletions charts/kube-bench-adapter/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -6,11 +6,11 @@ replicaCount: 1

image:
# --image repository of kube-bench-adapter
repository: ghcr.io/nirmata/kube-bench-adapter
repository: mritunjay394/policyreport
pullPolicy: Always
# Overrides the image tag whose default is the chart appVersion.
# --tag of image repository of kube-bench-adapter
tag: "latest"
tag: "v0.1.0"

imagePullSecrets: []
nameOverride: ""
Expand Down Expand Up @@ -40,17 +40,11 @@ kubeBench:
category: "CIS Benchmarks"
# -- specifies namespace where kube-bench job will run
namespace: "default"
# -- specify the benchmark for kube-bench job, allowed values:cis-1.5, cis-1.6, gke-1.0, eks-1.0, ack-1.0
benchmark: "cis-1.6"
# -- targets for benchmark of kube-bench job, multiple values allowed.
targets: "master,node,etcd,policies"
# -- specify the Kubernetes version for kube-bench job
version: "1.21"
# -- kube-bench image used for the adapter
kubebenchImg: "aquasec/kube-bench:latest"
kubebenchImg: "aquasec/kube-bench:v0.6.6"
# -- absolute path to the kubeconfig file
kubeconfig: "$HOME/.kube/config"
# -- name of name of YAML for kube-bench job, allowed values: job.yaml, job-master.yaml, job-node.yaml, job-ack.yaml, job-aks.yaml, job-eks-asff.yaml, job-eks.yaml, job-gke.yaml, job-iks.yaml
# -- name of provider of YAML for kube-bench job, allowed values: job.yaml, job-master.yaml, job-node.yaml, job-ack.yaml, job-aks.yaml, job-eks-asff.yaml, job-eks.yaml, job-gke.yaml, job-iks.yaml
yaml: "job.yaml"

service:
Expand Down

0 comments on commit 5c90031

Please sign in to comment.