Skip to content

Commit 2ceaff7

Browse files
Merge pull request #91278 from openshift-cherrypick-robot/cherry-pick-91257-to-rhacs-docs-4.7
[rhacs-docs-4.7] ROX-28626: remove erroneous info about scanner v4
2 parents 8cfcb65 + 0f84a37 commit 2ceaff7

File tree

1 file changed

+7
-9
lines changed

1 file changed

+7
-9
lines changed

modules/fetching-vulnerability-definitions.adoc

Lines changed: 7 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -5,22 +5,20 @@
55
[id="fetching-vulnerability-definitions_{context}"]
66
= Fetching vulnerability definitions
77

8-
//verify this info is still accurate
98
In online mode, Central fetches the vulnerability definitions every 5 minutes from a single feed.
10-
This feed combines vulnerability definitions from upstream sources, and it refreshes every 3 hours.
9+
This feed combines vulnerability definitions from upstream sources, and it refreshes every 3 hours. The address of the feed is `\https://definitions.stackrox.io`.
10+
11+
You can change the frequency of the default query from Central to the `definitions.stackrox.io` feed by setting the `ROX_SCANNER_VULN_UPDATE_INTERVAL` environment variable. Run the following command:
1112

12-
* The address of the feed is `\https://definitions.stackrox.io`.
13-
* You can change the default query frequency for Central and the StackRox Scanner by setting the `ROX_SCANNER_VULN_UPDATE_INTERVAL` environment variable:
14-
+
1513
[source,terminal]
1614
----
1715
$ oc -n stackrox set env deploy/central ROX_SCANNER_VULN_UPDATE_INTERVAL=<value> <1>
1816
----
1917
<1> If you use Kubernetes, enter `kubectl` instead of `oc`.
2018

21-
Note the following guidance:
19+
This variable applies to the connection between Central and the `definitions.stackrox.io` feed. Both the StackRox Scanner and Scanner V4 use vulnerability data from Central that is obtained from this feed. The StackRox Scanner's config map still has an `updater.interval` parameter for configuring the scanner's updating frequency, but it no longer includes the `fetchFromCentral` parameter.
2220

23-
* The StackRox Scanner's configuration map still has an `updater.interval` parameter for configuring the scanner's updating frequency, but it no longer includes the `fetchFromCentral` parameter.
24-
* Setting this environment variable is not supported for Scanner V4.
21+
For more information about the vulnerability sources that {product-title-short} uses, see "Vulnerability sources" in "{product-title} architecture".
2522

26-
For more information about the vulnerability sources that {product-title-short} uses, see "Vulnerability sources" in "{product-title} architecture".
23+
//Future work when time permits:
24+
// Take instructions for changing the frequency of fetching definitions and put them into a procedure module. Call that module from the operating/examine-images-for-vulnerabilities.adoc module.

0 commit comments

Comments
 (0)