Skip to content

Commit

Permalink
add trivy-operator-0.10.3-43141fa99898c4e583535bea527aea9a5e75ce7f.tgz
Browse files Browse the repository at this point in the history
trivy-operator-0.10.3-43141fa99898c4e583535bea527aea9a5e75ce7f.tgz-meta/README.md
trivy-operator-0.10.3-43141fa99898c4e583535bea527aea9a5e75ce7f.tgz-meta/main.yaml
trivy-operator-0.10.3-43141fa99898c4e583535bea527aea9a5e75ce7f.tgz-meta/values.schema.json
  • Loading branch information
catalogbot committed Dec 24, 2024
1 parent 9926d8e commit ebffa9d
Show file tree
Hide file tree
Showing 5 changed files with 717 additions and 1 deletion.
29 changes: 28 additions & 1 deletion index.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -16257,6 +16257,33 @@ entries:
urls:
- https://giantswarm.github.io/giantswarm-test-catalog/trivy-operator-0.10.3-5241c688bc54bacb15a605830cba8256bad7f18b.tgz
version: 0.10.3-5241c688bc54bacb15a605830cba8256bad7f18b
- annotations:
application.giantswarm.io/metadata: https://giantswarm.github.io/giantswarm-test-catalog/trivy-operator-0.10.3-43141fa99898c4e583535bea527aea9a5e75ce7f.tgz-meta/main.yaml
application.giantswarm.io/readme: https://giantswarm.github.io/giantswarm-test-catalog/trivy-operator-0.10.3-43141fa99898c4e583535bea527aea9a5e75ce7f.tgz-meta/README.md
application.giantswarm.io/team: shield
application.giantswarm.io/values-schema: https://giantswarm.github.io/giantswarm-test-catalog/trivy-operator-0.10.3-43141fa99898c4e583535bea527aea9a5e75ce7f.tgz-meta/values.schema.json
config.giantswarm.io/version: 1.x.x
apiVersion: v2
appVersion: 0.22.0
created: "2024-12-24T11:12:23.100540099Z"
dependencies:
- name: trivy-operator
repository: ""
version: 0.24.0
description: A Giant Swarm App for trivy-operator, the cluster security tool from
Aqua Security.
digest: 641bfcbb38e49bc85f8cf628ea2e3b83652c23a6becc402ad43f97801d119707
home: https://github.com/giantswarm/trivy-operator-app
icon: https://s.giantswarm.io/app-icons/trivy/1/light.svg
maintainers:
- name: Giant Swarm applications team
url: https://github.com/giantswarm/trivy-operator-app
name: trivy-operator
sources:
- https://github.com/aquasecurity/trivy-operator
urls:
- https://giantswarm.github.io/giantswarm-test-catalog/trivy-operator-0.10.3-43141fa99898c4e583535bea527aea9a5e75ce7f.tgz
version: 0.10.3-43141fa99898c4e583535bea527aea9a5e75ce7f
- annotations:
application.giantswarm.io/metadata: https://giantswarm.github.io/giantswarm-test-catalog/trivy-operator-0.10.3-1d9696ea3e6c82656657cfcc330743d3c4e90763.tgz-meta/main.yaml
application.giantswarm.io/readme: https://giantswarm.github.io/giantswarm-test-catalog/trivy-operator-0.10.3-1d9696ea3e6c82656657cfcc330743d3c4e90763.tgz-meta/README.md
Expand Down Expand Up @@ -16690,4 +16717,4 @@ entries:
urls:
- https://giantswarm.github.io/giantswarm-test-catalog/zot-2.0.0-9afe78380a7b5315ff0f2c37eb29bb4c27eb545d.tgz
version: 2.0.0-9afe78380a7b5315ff0f2c37eb29bb4c27eb545d
generated: "2024-12-23T10:14:33.079010567Z"
generated: "2024-12-24T11:12:23.096192574Z"
Binary file not shown.
Original file line number Diff line number Diff line change
@@ -0,0 +1,63 @@
[![CircleCI](https://circleci.com/gh/giantswarm/trivy-operator-app.svg?style=shield)](https://circleci.com/gh/giantswarm/trivy-operator-app)

# Trivy Operator

Giant Swarm offers an app for Aqua Security's [Trivy Operator][trivy-operator-upstream], which can be installed in workload clusters. It is part of our [managed security solution][managed-security], but can also be installed independently.

Trivy Operator is an in-cluster component which runs vulnerability scans, Kubernetes CIS and NSA benchmarks, and other types of policy and best practice validation scans using [Trivy][trivy-aqua]. It replaces a previous project, called [Starboard][starboard], which has now been fully deprecated along with our [Starboard App][starboard-app].

The results of these scans are saved in the cluster in the form of Kubernetes custom resources named `VulnerabilityReport`, `ConfigAuditReport`, and other types of reports.

Results of each scan type can be retrieved from the cluster, for example using `kubectl`:

```shell
$ kubectl get vulnerabilityreports
NAMESPACE NAME REPOSITORY TAG SCANNER AGE
...
```

You can also export the data from these reports to Prometheus to use in alerts and Grafana dashboards using our [`starboard-exporter`][starboard-exporter].

This repository contains our packaging and Giant Swarm-specific configuration of the upstream charts.

## Installing

There are several ways to install this app onto a workload cluster.

- [Using our web interface][app-ui].
- By creating an [App resource][app-crd] in the management cluster as explained in [Getting started with App Platform][app-getting-started].

### Scanning Backend

To perform vulnerability scans and produce reports, Trivy Operator needs a vulnerability scanner.

If deploying Trivy Operator as part of our managed security bundle, a Trivy server will be automatically installed for you.

If installing Trivy Operator independently, we recommend first installing our [Trivy app][trivy-app] in your cluster to serve as the vulnerability scanner for Trivy Operator, or using another existing Trivy instance.

Alternatively, you can configure Trivy Operator to use Standalone mode, which creates a new instance of the Trivy scanner per-scan. This is very inefficient and can lead to throttling by the backing vulnerability database. To do it anyway, set `trivy.mode` to `Standalone` in `values.yaml`.

In either case, please note that the Trivy version set by `trivy.imageRef` must be the same version as your Trivy backend (even if the actual image is not the same), as Trivy Operator uses that value internally to determine the API format to use for Trivy.

### Sample App CR and ConfigMap for the management cluster

If you have access to the Kubernetes API on the management cluster, you could create
the App CR and ConfigMap directly.

See our [full reference on how to configure apps][app-config] for more details.

## Credit

- [`trivy-operator`][trivy-operator-upstream]

[app-config]: https://docs.giantswarm.io/app-platform/app-configuration/
[app-crd]: https://docs.giantswarm.io/ui-api/management-api/crd/apps.application.giantswarm.io/
[app-getting-started]: https://docs.giantswarm.io/app-platform/getting-started/
[app-ui]: https://docs.giantswarm.io/ui-api/web/app-platform/#installing-an-app
[managed-security]: https://docs.giantswarm.io/app-platform/apps/security/
[starboard]: https://github.com/aquasecurity/starboard
[starboard-app]: https://github.com/giantswarm/starboard-app
[starboard-exporter]: https://github.com/giantswarm/starboard-exporter
[trivy-app]: https://github.com/giantswarm/trivy-app/
[trivy-aqua]: https://github.com/aquasecurity/trivy
[trivy-operator-upstream]: https://github.com/aquasecurity/trivy-operator
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
annotations:
application.giantswarm.io/metadata: https://giantswarm.github.io/giantswarm-test-catalog/trivy-operator-0.10.3-43141fa99898c4e583535bea527aea9a5e75ce7f.tgz-meta/main.yaml
application.giantswarm.io/readme: https://giantswarm.github.io/giantswarm-test-catalog/trivy-operator-0.10.3-43141fa99898c4e583535bea527aea9a5e75ce7f.tgz-meta/README.md
application.giantswarm.io/team: shield
application.giantswarm.io/values-schema: https://giantswarm.github.io/giantswarm-test-catalog/trivy-operator-0.10.3-43141fa99898c4e583535bea527aea9a5e75ce7f.tgz-meta/values.schema.json
config.giantswarm.io/version: 1.x.x
chartApiVersion: v2
chartFile: trivy-operator-0.10.3-43141fa99898c4e583535bea527aea9a5e75ce7f.tgz
dateCreated: '2024-12-24T11:12:18.024976Z'
digest: 641bfcbb38e49bc85f8cf628ea2e3b83652c23a6becc402ad43f97801d119707
home: https://github.com/giantswarm/trivy-operator-app
icon: https://s.giantswarm.io/app-icons/trivy/1/light.svg
Loading

0 comments on commit ebffa9d

Please sign in to comment.