Skip to content

Commit 0866b67

Browse files
ethanw-tmtrend-container-security-bot
ethanw-tm
and
trend-container-security-bot
authored
Release operator version visionone-containersecurity (0.0.3) (#7970)
Signed-off-by: Vision One Container Security Bot <[email protected]> Co-authored-by: Vision One Container Security Bot <[email protected]>
1 parent 8389249 commit 0866b67

10 files changed

+904
-0
lines changed

‎operators/visionone-containersecurity/0.0.3/manifests/container-security.trendmicro.com_visiononecontainersecurities.yaml‎

Lines changed: 145 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,145 @@
1+
apiVersion: apiextensions.k8s.io/v1
2+
kind: CustomResourceDefinition
3+
metadata:
4+
creationTimestamp: null
5+
name: visiononecontainersecurities.container-security.trendmicro.com
6+
spec:
7+
group: container-security.trendmicro.com
8+
names:
9+
kind: VisionOneContainerSecurity
10+
listKind: VisionOneContainerSecurityList
11+
plural: visiononecontainersecurities
12+
singular: visiononecontainersecurity
13+
scope: Namespaced
14+
versions:
15+
- name: v1alpha1
16+
schema:
17+
openAPIV3Schema:
18+
description: VisionOneContainerSecurity is the Schema for the visiononecontainersecurities
19+
API
20+
properties:
21+
apiVersion:
22+
description: 'APIVersion defines the versioned schema of this representation
23+
of an object. Servers should convert recognized schemas to the latest
24+
internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
25+
type: string
26+
kind:
27+
description: 'Kind is a string value representing the REST resource this
28+
object represents. Servers may infer this from the endpoint the client
29+
submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
30+
type: string
31+
metadata:
32+
type: object
33+
spec:
34+
description: VisionOneContainerSecuritySpec defines the desired state
35+
of VisionOneContainerSecurity.
36+
properties:
37+
visionOne:
38+
properties:
39+
bootstrapToken:
40+
type: string
41+
clusterName:
42+
type: string
43+
clusterNamePrefix:
44+
type: string
45+
clusterRegistrationKey:
46+
type: boolean
47+
endpoint:
48+
type: string
49+
exclusion:
50+
properties:
51+
namespaces:
52+
items:
53+
type: string
54+
type: array
55+
osNsPrefixes:
56+
items:
57+
type: string
58+
type: array
59+
type: object
60+
groupId:
61+
type: string
62+
inventoryCollection:
63+
properties:
64+
enabled:
65+
type: boolean
66+
type: object
67+
malwareScanning:
68+
properties:
69+
enabled:
70+
type: boolean
71+
excludedPaths:
72+
items:
73+
type: string
74+
type: array
75+
scanTimeoutSeconds:
76+
type: integer
77+
type: object
78+
policyId:
79+
type: string
80+
policyOperator:
81+
properties:
82+
clusterPolicyName:
83+
type: string
84+
type: object
85+
runtimeSecurity:
86+
properties:
87+
enabled:
88+
type: boolean
89+
type: object
90+
secretScanning:
91+
properties:
92+
enabled:
93+
type: boolean
94+
type: object
95+
vulnerabilityScanning:
96+
properties:
97+
enabled:
98+
type: boolean
99+
type: object
100+
required:
101+
- endpoint
102+
type: object
103+
required:
104+
- visionOne
105+
type: object
106+
status:
107+
description: Status defines the observed state of VisionOneContainerSecurity
108+
properties:
109+
conditions:
110+
description: Conditions represent the latest available observations
111+
of an object's state.
112+
items:
113+
properties:
114+
lastTransitionTime:
115+
format: date-time
116+
type: string
117+
message:
118+
type: string
119+
reason:
120+
type: string
121+
status:
122+
type: string
123+
type:
124+
type: string
125+
required:
126+
- type
127+
- status
128+
type: object
129+
type: array
130+
deployedRelease:
131+
description: Information about the deployed Helm release
132+
type: object
133+
x-kubernetes-preserve-unknown-fields: true
134+
type: object
135+
type: object
136+
served: true
137+
storage: true
138+
subresources:
139+
status: {}
140+
status:
141+
acceptedNames:
142+
kind: ""
143+
plural: ""
144+
conditions: null
145+
storedVersions: null

‎operators/visionone-containersecurity/0.0.3/manifests/visionone-containersecurity-controller-manager-metrics-service_v1_service.yaml‎

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
apiVersion: v1
2+
kind: Service
3+
metadata:
4+
creationTimestamp: null
5+
labels:
6+
app.kubernetes.io/managed-by: kustomize
7+
app.kubernetes.io/name: visionone-containersecurity
8+
control-plane: controller-manager
9+
name: visionone-containersecurity-controller-manager-metrics-service
10+
spec:
11+
ports:
12+
- name: https
13+
port: 8443
14+
protocol: TCP
15+
targetPort: 8443
16+
selector:
17+
control-plane: controller-manager
18+
status:
19+
loadBalancer: {}

‎operators/visionone-containersecurity/0.0.3/manifests/visionone-containersecurity-crd-admin-role-binding_rbac.authorization.k8s.io_v1_clusterrolebinding.yaml‎

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
apiVersion: rbac.authorization.k8s.io/v1
2+
kind: ClusterRoleBinding
3+
metadata:
4+
creationTimestamp: null
5+
name: visionone-containersecurity-crd-admin-role-binding
6+
roleRef:
7+
apiGroup: rbac.authorization.k8s.io
8+
kind: ClusterRole
9+
name: cluster-admin
10+
subjects:
11+
- kind: ServiceAccount
12+
name: visionone-containersecurity-controller-manager
13+
namespace: trendmicro-system

‎operators/visionone-containersecurity/0.0.3/manifests/visionone-containersecurity-editor-role_rbac.authorization.k8s.io_v1_clusterrole.yaml‎

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
apiVersion: rbac.authorization.k8s.io/v1
2+
kind: ClusterRole
3+
metadata:
4+
creationTimestamp: null
5+
labels:
6+
app.kubernetes.io/managed-by: kustomize
7+
app.kubernetes.io/name: visionone-containersecurity
8+
name: visionone-containersecurity-editor-role
9+
rules:
10+
- apiGroups:
11+
- container-security.trendmicro.com
12+
resources:
13+
- visiononecontainersecurities
14+
verbs:
15+
- create
16+
- delete
17+
- get
18+
- list
19+
- patch
20+
- update
21+
- watch
22+
- apiGroups:
23+
- container-security.trendmicro.com
24+
resources:
25+
- visiononecontainersecurities/status
26+
verbs:
27+
- get

‎operators/visionone-containersecurity/0.0.3/manifests/visionone-containersecurity-metrics-reader_rbac.authorization.k8s.io_v1_clusterrole.yaml‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
apiVersion: rbac.authorization.k8s.io/v1
2+
kind: ClusterRole
3+
metadata:
4+
creationTimestamp: null
5+
name: visionone-containersecurity-metrics-reader
6+
rules:
7+
- nonResourceURLs:
8+
- /metrics
9+
verbs:
10+
- get

‎operators/visionone-containersecurity/0.0.3/manifests/visionone-containersecurity-viewer-role_rbac.authorization.k8s.io_v1_clusterrole.yaml‎

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,23 @@
1+
apiVersion: rbac.authorization.k8s.io/v1
2+
kind: ClusterRole
3+
metadata:
4+
creationTimestamp: null
5+
labels:
6+
app.kubernetes.io/managed-by: kustomize
7+
app.kubernetes.io/name: visionone-containersecurity
8+
name: visionone-containersecurity-viewer-role
9+
rules:
10+
- apiGroups:
11+
- container-security.trendmicro.com
12+
resources:
13+
- visiononecontainersecurities
14+
verbs:
15+
- get
16+
- list
17+
- watch
18+
- apiGroups:
19+
- container-security.trendmicro.com
20+
resources:
21+
- visiononecontainersecurities/status
22+
verbs:
23+
- get

0 commit comments

Comments
 (0)