Skip to content

Commit 02c55d8

Browse files
guidobonomiguidobonomi
authored
feat(node-analyzer): enable DB V2 by default in Host and Runtime scanner (#1416)
1 parent ab10379 commit 02c55d8

File tree

6 files changed

+23
-5
lines changed

6 files changed

+23
-5
lines changed

‎charts/node-analyzer/Chart.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ name: node-analyzer
33
description: Sysdig Node Analyzer
44

55
# currently matching Sysdig's appVersion 1.14.34
6-
version: 1.17.9
6+
version: 1.17.10
77
appVersion: 12.8.0
88
keywords:
99
- monitoring

‎charts/node-analyzer/README.md‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -182,7 +182,7 @@ The following table lists the configurable parameters of the Sysdig Node Analyze
182182
| `nodeAnalyzer.hostScanner.additionalDirsToScan` | Sets the optional comma-separated list of directories in addition to the default ones. | ` ` |
183183
| `nodeAnalyzer.hostScanner.env` | Specifies the extra environment variables that will be passed onto pods. | `{}` |
184184
| `nodeAnalyzer.hostScanner.image.repository` | Specifies the image repository to pull the Host Scanner from. | `sysdig/vuln-host-scanner` |
185-
| `nodeAnalyzer.hostScanner.image.tag` | Specifies the image tag to pull the Host Scanner. | `0.5.2` |
185+
| `nodeAnalyzer.hostScanner.image.tag` | Specifies the image tag to pull the Host Scanner. | `0.6.3` |
186186
| `nodeAnalyzer.hostScanner.image.digest` | Specifies the image digest to pull. | ` ` |
187187
| `nodeAnalyzer.hostScanner.image.pullPolicy` | Specifies the image pull policy for the Host Scanner. | `""` |
188188
| `nodeAnalyzer.hostScanner.resources.requests.cpu` | Specifies the Host Scanner CPU requests per node. | `150m` |
@@ -196,7 +196,7 @@ The following table lists the configurable parameters of the Sysdig Node Analyze
196196
| `nodeAnalyzer.runtimeScanner.extraMounts` | Specifies a container engine custom socket path (docker, containerd, CRI-O). | |
197197
| `nodeAnalyzer.runtimeScanner.storageClassName` | Specifies the Runtime Scanner storage class to use instead of emptyDir for ephemeral storage. | `` |
198198
| `nodeAnalyzer.runtimeScanner.image.repository` | Specifies the image repository to pull the Runtime Scanner from. | `sysdig/vuln-runtime-scanner` |
199-
| `nodeAnalyzer.runtimeScanner.image.tag` | Specifies the image tag to pull the Runtime Scanner. | `1.5.7` |
199+
| `nodeAnalyzer.runtimeScanner.image.tag` | Specifies the image tag to pull the Runtime Scanner. | `1.6.2` |
200200
| `nodeAnalyzer.runtimeScanner.image.digest` | Specifies the image digest to pull. | ` ` |
201201
| `nodeAnalyzer.runtimeScanner.image.pullPolicy` | Specifies the image pull policy for the Runtime Scanner. | `""` |
202202
| `nodeAnalyzer.runtimeScanner.resources.requests.cpu` | Specifies the Runtime Scanner CPU requests per node. | `150m` |

‎charts/node-analyzer/templates/configmap-host-scanner.yaml‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -36,4 +36,7 @@ data:
3636
{{- if (.Values.nodeAnalyzer.noProxy | default .Values.global.proxy.noProxy) }}
3737
no_proxy: {{ .Values.nodeAnalyzer.noProxy | default .Values.global.proxy.noProxy }}
3838
{{- end -}}
39+
{{- if .Values.nodeAnalyzer.hostScanner.vulnerabilityDBVersion }}
40+
vuln_db_version: {{ .Values.nodeAnalyzer.hostScanner.vulnerabilityDBVersion | quote }}
41+
{{- end }}
3942
{{- end }}

‎charts/node-analyzer/templates/daemonset-node-analyzer.yaml‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -643,6 +643,12 @@ spec:
643643
name: {{ .Release.Name }}-runtime-scanner
644644
key: max_image_size_allowed
645645
optional: true
646+
- name: VULNERABILITY_DB_VERSION
647+
valueFrom:
648+
configMapKeyRef:
649+
name: {{ .Release.Name }}-runtime-scanner
650+
key: vuln_db_version
651+
optional: true
646652
- name: SYSDIG_API_URL
647653
valueFrom:
648654
configMapKeyRef:
@@ -854,6 +860,12 @@ spec:
854860
name: {{ .Release.Name }}-host-scanner
855861
key: analyzer.maxFileSizeAllowed
856862
optional: true
863+
- name: VULNERABILITY_DB_VERSION
864+
valueFrom:
865+
configMapKeyRef:
866+
name: {{ .Release.Name }}-host-scanner
867+
key: vuln_db_version
868+
optional: true
857869
- name: TMPDIR
858870
value: "/tmp"
859871
- name: PROBES_PORT

‎charts/node-analyzer/templates/runtimeScanner/runtime-scanner-configmap.yaml‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -37,4 +37,7 @@ data:
3737
{{- if .Values.nodeAnalyzer.runtimeScanner.settings.maxFileSizeAllowed }}
3838
analyzer.maxFileSizeAllowed: {{ .Values.nodeAnalyzer.runtimeScanner.settings.maxFileSizeAllowed | int64 | quote }}
3939
{{- end -}}
40+
{{- if .Values.nodeAnalyzer.runtimeScanner.settings.vulnerabilityDBVersion }}
41+
vuln_db_version: {{ .Values.nodeAnalyzer.runtimeScanner.settings.vulnerabilityDBVersion | quote }}
42+
{{- end -}}
4043
{{- end }}

‎charts/node-analyzer/values.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -289,7 +289,7 @@ nodeAnalyzer:
289289
probesPort: 7002
290290
image:
291291
repository: sysdig/vuln-runtime-scanner
292-
tag: "1.5.7"
292+
tag: "1.6.2"
293293
digest:
294294
pullPolicy:
295295
storageClassName:
@@ -364,7 +364,7 @@ nodeAnalyzer:
364364

365365
image:
366366
repository: sysdig/vuln-host-scanner
367-
tag: "0.5.2"
367+
tag: "0.6.3"
368368
digest:
369369
pullPolicy:
370370

0 commit comments

Comments
 (0)