diff --git a/README.md b/README.md index 3a9cfba..67d2b32 100644 --- a/README.md +++ b/README.md @@ -18,7 +18,19 @@ The token has to be set in the `secret.dockerconfigjson` variable on deployment. ```yaml # Example values.yaml secret: - dockerconfigjson: $$_BASE64_ENCODED_TOKEN_$$ + dockerconfigjson: $$_BASE64_ENCODED_JSON_CONTAINING_TOKEN_$$ +``` + +Example of the dockerconfigjson + +```json +{ + "auths": { + "ghcr.io": { + "auth": "$$_BASE64_ENCODED_USERNAME_AND_TOKEN_$$" + } + } +} ``` 3. Add GD Scan repository: diff --git a/charts/gdscan/Chart.yaml b/charts/gdscan/Chart.yaml index 4bb5c56..9a85429 100644 --- a/charts/gdscan/Chart.yaml +++ b/charts/gdscan/Chart.yaml @@ -5,4 +5,4 @@ maintainers: - name: G DATA CyberDefense AG email: oem@gdata.de type: application -version: 0.7.1 +version: 0.7.2 diff --git a/charts/gdscan/templates/update.yaml b/charts/gdscan/templates/update.yaml index ff8a7d6..9214af0 100644 --- a/charts/gdscan/templates/update.yaml +++ b/charts/gdscan/templates/update.yaml @@ -66,6 +66,7 @@ spec: {{- else }} - "deployment/{{ include "gdscan.fullname" . }}" {{- end }} +{{- if .Values.autoUpdate.networkPolicy.enabled }} --- apiVersion: networking.k8s.io/v1 kind: NetworkPolicy @@ -81,5 +82,6 @@ spec: ingress: [] egress: - ports: - - port: 6443 + - port: {{ .Values.autoUpdate.networkPolicy.k8sApiPort }} +{{- end }} {{- end}} \ No newline at end of file diff --git a/charts/gdscan/values.yaml b/charts/gdscan/values.yaml index 3230cc0..f007fde 100644 --- a/charts/gdscan/values.yaml +++ b/charts/gdscan/values.yaml @@ -73,7 +73,11 @@ persistence: memory: false size: 5Gi storageClass: "" + autoUpdate: enabled: true # every hour schedule: "0 * * * *" + networkPolicy: + enabled: true + k8sApiPort: 6443