Skip to content

Commit 697b6f4

Browse files
authored
[K9VULN-4927] Update CSM vm config (#29115)
* Update config for sbom collection * Update vulnerabilities.md * Remove useless helm config * Update deamonset * Update docker page to include vm
1 parent 9eedc38 commit 697b6f4

File tree

7 files changed

+52
-2
lines changed

7 files changed

+52
-2
lines changed

content/en/infrastructure/containers/container_images.md

+10
Original file line numberDiff line numberDiff line change
@@ -124,6 +124,8 @@ spec:
124124
enabled: true
125125
containerImage:
126126
enabled: true
127+
host:
128+
enabled: true
127129
```
128130

129131
{{% /tab %}}
@@ -137,6 +139,8 @@ datadog:
137139
sbom:
138140
containerImage:
139141
enabled: true
142+
host:
143+
enabled: true
140144
```
141145
[1]: https://github.com/DataDog/helm-charts/blob/main/charts/datadog/values.yaml#L651
142146
{{% /tab %}}
@@ -160,6 +164,10 @@ To enable container image vulnerability scanning on your [ECS EC2 instances][1],
160164
{
161165
"name": "DD_SBOM_CONTAINER_IMAGE_ENABLED",
162166
"value": "true"
167+
},
168+
{
169+
"name": "DD_SBOM_HOST_ENABLED",
170+
"value": "true"
163171
}
164172
]
165173
}
@@ -195,6 +203,8 @@ sbom:
195203
enabled: true
196204
container_image:
197205
enabled: true
206+
host:
207+
enabled: true
198208
```
199209

200210
[1]: /containers/amazon_ecs/?tab=awscli#setup

content/en/security/cloud_security_management/setup/agent/docker.md

+5-1
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ aliases:
88
- /security/cloud_security_management/setup/csm_enterprise/agent/docker
99
---
1010

11-
Use the following instructions to enable Misconfigurations and Threat Detection.
11+
Use the following instructions to enable Misconfigurations, Threat Detection, and Vulnerability Management.
1212

1313
{{< partial name="security-platform/CSW-billing-note.html" >}}
1414

@@ -46,6 +46,10 @@ docker run -d --name dd-agent \
4646
-e DD_COMPLIANCE_CONFIG_HOST_BENCHMARKS_ENABLED=true \
4747
-e DD_RUNTIME_SECURITY_CONFIG_ENABLED=true \
4848
-e DD_RUNTIME_SECURITY_CONFIG_REMOTE_CONFIGURATION_ENABLED=true \
49+
-e DD_CONTAINER_IMAGE_ENABLE=true
50+
-e DD_SBOM_ENABLED=true
51+
-e DD_SBOM_CONTAINER_IMAGE_ENABLED=true
52+
-e DD_SBOM_HOST_ENABLED=true
4953
-e HOST_ROOT=/host/root \
5054
-e DD_API_KEY=<API KEY> \
5155
gcr.io/datadoghq/agent:7

content/en/security/cloud_security_management/setup/agent/kubernetes.md

+8
Original file line numberDiff line numberDiff line change
@@ -137,6 +137,14 @@ Add the following settings to the `env` section of `security-agent` and `system-
137137
value: "true"
138138
- name: DD_COMPLIANCE_CONFIG_HOST_BENCHMARKS_ENABLED
139139
value: "true"
140+
- name: DD_CONTAINER_IMAGE_ENABLED
141+
value: "true"
142+
- name: DD_SBOM_ENABLED
143+
value: "true"
144+
- name: DD_SBOM_CONTAINER_IMAGE_ENABLED
145+
value: "true"
146+
- name: DD_SBOM_HOST_ENABLED
147+
value: "true"
140148
- name: DD_SBOM_CONTAINER_IMAGE_USE_MOUNT
141149
value: "true"
142150
[...]

content/en/security/cloud_security_management/troubleshooting/vulnerabilities.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -93,4 +93,4 @@ datadog:
9393
[2]: /security/cloud_security_management/setup/csm_enterprise?tab=aws#configure-the-agent-for-vulnerabilities
9494
[3]: https://app.datadoghq.com/security/configuration/csm/setup
9595
[4]: https://app.datadoghq.com/metric/summary
96-
[5]: https://cloud.google.com/kubernetes-engine/docs/how-to/image-streaming#disable
96+
[5]: https://cloud.google.com/kubernetes-engine/docs/how-to/image-streaming#disable

content/es/infrastructure/containers/container_images.md

+10
Original file line numberDiff line numberDiff line change
@@ -123,6 +123,8 @@ spec:
123123
enabled: true
124124
containerImage:
125125
enabled: true
126+
host:
127+
enabled: true
126128
```
127129

128130
{{% /tab %}}
@@ -136,6 +138,8 @@ datadog:
136138
sbom:
137139
containerImage:
138140
enabled: true
141+
host:
142+
enabled: true
139143
```
140144
[1]: https://github.com/DataDog/helm-charts/blob/main/charts/datadog/values.yaml#L651
141145
{{% /tab %}}
@@ -159,6 +163,10 @@ Para habilitar el escaneo de vulnerabilidades de imágenes de contenedor en tus
159163
{
160164
"name": "DD_SBOM_CONTAINER_IMAGE_ENABLED",
161165
"value": "true"
166+
},
167+
{
168+
"name": "DD_SBOM_HOST_ENABLED",
169+
"value": "true"
162170
}
163171
]
164172
}
@@ -194,6 +202,8 @@ sbom:
194202
enabled: true
195203
container_image:
196204
enabled: true
205+
host:
206+
enabled: true
197207
```
198208

199209
[1]: /es/containers/amazon_ecs/?tab=awscli#setup

content/ja/infrastructure/containers/container_images.md

+8
Original file line numberDiff line numberDiff line change
@@ -122,6 +122,8 @@ spec:
122122
enabled: true
123123
containerImage:
124124
enabled: true
125+
host:
126+
enabled: true
125127
```
126128

127129
{{% /tab %}}
@@ -135,6 +137,8 @@ datadog:
135137
sbom:
136138
containerImage:
137139
enabled: true
140+
host:
141+
enabled: true
138142
```
139143
[1]: https://github.com/DataDog/helm-charts/blob/main/charts/datadog/values.yaml#L651
140144
{{% /tab %}}
@@ -158,6 +162,10 @@ datadog:
158162
{
159163
"name": "DD_SBOM_CONTAINER_IMAGE_ENABLED",
160164
"value": "true"
165+
},
166+
{
167+
"name": "DD_SBOM_HOST_ENABLED",
168+
"value": "true"
161169
}
162170
]
163171
}

content/ko/infrastructure/containers/container_images.md

+10
Original file line numberDiff line numberDiff line change
@@ -122,6 +122,8 @@ spec:
122122
enabled: true
123123
containerImage:
124124
enabled: true
125+
host:
126+
enabled: true
125127
```
126128

127129
{{% /tab %}}
@@ -135,6 +137,8 @@ datadog:
135137
sbom:
136138
containerImage:
137139
enabled: true
140+
host:
141+
enabled: true
138142
```
139143
[1]: https://github.com/DataDog/helm-charts/blob/main/charts/datadog/values.yaml#L651
140144
{{% /tab %}}
@@ -158,6 +162,10 @@ datadog:
158162
{
159163
"name": "DD_SBOM_CONTAINER_IMAGE_ENABLED",
160164
"value": "true"
165+
},
166+
{
167+
"name": "DD_SBOM_HOST_ENABLED",
168+
"value": "true"
161169
}
162170
]
163171
}
@@ -193,6 +201,8 @@ sbom:
193201
enabled: true
194202
container_image:
195203
enabled: true
204+
host:
205+
enabled: true
196206
```
197207

198208
[1]: /ko/containers/amazon_ecs/?tab=awscli#setup

0 commit comments

Comments
 (0)