Skip to content

Commit 3a4bc6e

Browse files
wcrumwcrum
authored
PLT-849: Kubescape Plugin (#244)
* feat: add kubescape plugin * fix: update repository image and tag * chore: update dependency for GoVulnCheck * chore: fix go sum
1 parent cdb6424 commit 3a4bc6e

File tree

5 files changed

+71
-12
lines changed

5 files changed

+71
-12
lines changed

‎README.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -20,6 +20,7 @@ Plugins:
2020
- [Network](https://github.com/spectrocloud-labs/validator-plugin-network)
2121
- [OCI](https://github.com/spectrocloud-labs/validator-plugin-oci)
2222
- [vSphere](https://github.com/spectrocloud-labs/validator-plugin-vsphere)
23+
- [Kubescape](https://github.com/spectrocloud-labs/validator-plugin-kubescape)
2324

2425
## Installation
2526

‎chart/validator/values.yaml

Lines changed: 57 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -426,6 +426,63 @@ plugins:
426426
protocol: TCP
427427
targetPort: https
428428
type: ClusterIP
429+
- chart:
430+
name: validator-plugin-kubescape
431+
repository: "https://spectrocloud-labs.github.io/validator-plugin-kubescape"
432+
version: v0.0.1
433+
values: |-
434+
controllerManager:
435+
kubeRbacProxy:
436+
args:
437+
- --secure-listen-address=0.0.0.0:8443
438+
- --upstream=http://127.0.0.1:8080/
439+
- --logtostderr=true
440+
- --v=0
441+
containerSecurityContext:
442+
allowPrivilegeEscalation: false
443+
capabilities:
444+
drop:
445+
- ALL
446+
image:
447+
repository: gcr.io/kubebuilder/kube-rbac-proxy
448+
tag: v0.15.0
449+
resources:
450+
limits:
451+
cpu: 500m
452+
memory: 128Mi
453+
requests:
454+
cpu: 5m
455+
memory: 64Mi
456+
manager:
457+
args:
458+
- --health-probe-bind-address=:8081
459+
- --leader-elect
460+
containerSecurityContext:
461+
allowPrivilegeEscalation: false
462+
capabilities:
463+
drop:
464+
- ALL
465+
image:
466+
repository: quay.io/spectrocloud-labs/validator-plugin-kubescape
467+
tag: v0.0.1
468+
resources:
469+
limits:
470+
cpu: 500m
471+
memory: 128Mi
472+
requests:
473+
cpu: 10m
474+
memory: 64Mi
475+
replicas: 1
476+
serviceAccount:
477+
annotations: {}
478+
kubernetesClusterDomain: cluster.local
479+
metricsService:
480+
ports:
481+
- name: https
482+
port: 8443
483+
protocol: TCP
484+
targetPort: https
485+
type: ClusterIP
429486
430487
pluginSecrets:
431488
# If installing the AWS plugin, the below config is required unless one of the following applies:

‎docs/install.md

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -321,4 +321,5 @@ Below are links to the documentation for the other plugins.
321321
- [Azure](https://github.com/spectrocloud-labs/validator-plugin-azure)
322322
- [Network](https://github.com/spectrocloud-labs/validator-plugin-network)
323323
- [OCI](https://github.com/spectrocloud-labs/validator-plugin-oci)
324-
- [vSphere](https://github.com/spectrocloud-labs/validator-plugin-vsphere)
324+
- [vSphere](https://github.com/spectrocloud-labs/validator-plugin-vsphere)
325+
- [Kubescape](https://github.com/spectrocloud-labs/validator-plugin-kubescape)

‎go.mod

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -59,10 +59,10 @@ require (
5959
github.com/spf13/pflag v1.0.5 // indirect
6060
go.uber.org/multierr v1.11.0 // indirect
6161
go.uber.org/zap v1.25.0 // indirect
62-
golang.org/x/net v0.21.0 // indirect
62+
golang.org/x/net v0.24.0 // indirect
6363
golang.org/x/oauth2 v0.14.0 // indirect
64-
golang.org/x/sys v0.17.0 // indirect
65-
golang.org/x/term v0.17.0 // indirect
64+
golang.org/x/sys v0.19.0 // indirect
65+
golang.org/x/term v0.19.0 // indirect
6666
golang.org/x/text v0.14.0 // indirect
6767
golang.org/x/time v0.3.0 // indirect
6868
golang.org/x/tools v0.17.0 // indirect

‎go.sum

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -185,8 +185,8 @@ go.uber.org/zap v1.25.0/go.mod h1:JIAUzQIH94IC4fOJQm7gMmBJP5k7wQfdcnYdPoEXJYk=
185185
golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
186186
golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
187187
golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
188-
golang.org/x/crypto v0.19.0 h1:ENy+Az/9Y1vSrlrvBSyna3PITt4tiZLf7sgCjZBX7Wo=
189-
golang.org/x/crypto v0.19.0/go.mod h1:Iy9bg/ha4yyC70EfRS8jz+B6ybOBKMaSxLj6P6oBDfU=
188+
golang.org/x/crypto v0.22.0 h1:g1v0xeRhjcugydODzvb3mEM9SQ0HGp9s/nh3COQ/C30=
189+
golang.org/x/crypto v0.22.0/go.mod h1:vr6Su+7cTlO45qkww3VDJlzDn0ctJvRgYbC2NvXHt+M=
190190
golang.org/x/exp v0.0.0-20240119083558-1b970713d09a h1:Q8/wZp0KX97QFTc2ywcOE0YRjZPVIx+MXInMzdvQqcA=
191191
golang.org/x/exp v0.0.0-20240119083558-1b970713d09a/go.mod h1:idGWGoKP1toJGkd5/ig9ZLuPcZBC3ewk7SzmH0uou08=
192192
golang.org/x/lint v0.0.0-20190930215403-16217165b5de/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
@@ -200,8 +200,8 @@ golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLL
200200
golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
201201
golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
202202
golang.org/x/net v0.0.0-20210405180319-a5a99cb37ef4/go.mod h1:p54w0d4576C0XHj96bSt6lcn1PtDYWL6XObtHCRCNQM=
203-
golang.org/x/net v0.21.0 h1:AQyQV4dYCvJ7vGmJyKki9+PBdyvhkSd8EIx/qb0AYv4=
204-
golang.org/x/net v0.21.0/go.mod h1:bIjVDfnllIU7BJ2DNgfnXvpSvtn8VRwhlsaeUTyUS44=
203+
golang.org/x/net v0.24.0 h1:1PcaxkF854Fu3+lvBIx5SYn9wRlBzzcnHZSiaFFAb0w=
204+
golang.org/x/net v0.24.0/go.mod h1:2Q7sJY5mzlzWjKtYUEXSlBWCdyaioyXzRB2RtU8KVE8=
205205
golang.org/x/oauth2 v0.14.0 h1:P0Vrf/2538nmC0H+pEQ3MNFRRnVR7RlqyVw+bvm26z0=
206206
golang.org/x/oauth2 v0.14.0/go.mod h1:lAtNWgaWfL4cm7j2OV8TxGi9Qb7ECORx8DktCY74OwM=
207207
golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
@@ -219,11 +219,11 @@ golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7w
219219
golang.org/x/sys v0.0.0-20210330210617-4fbd30eecc44/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
220220
golang.org/x/sys v0.0.0-20210510120138-977fb7262007/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
221221
golang.org/x/sys v0.0.0-20220908164124-27713097b956/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
222-
golang.org/x/sys v0.17.0 h1:25cE3gD+tdBA7lp7QfhuV+rJiE9YXTcS3VG1SqssI/Y=
223-
golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
222+
golang.org/x/sys v0.19.0 h1:q5f1RH2jigJ1MoAWp2KTp3gm5zAGFUTarQZ5U386+4o=
223+
golang.org/x/sys v0.19.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
224224
golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
225-
golang.org/x/term v0.17.0 h1:mkTF7LCd6WGJNL3K1Ad7kwxNfYAW6a8a8QqtMblp/4U=
226-
golang.org/x/term v0.17.0/go.mod h1:lLRBjIVuehSbZlaOtGMbcMncT+aqLLLmKrsjNrUguwk=
225+
golang.org/x/term v0.19.0 h1:+ThwsDv+tYfnJFhF4L8jITxu1tdTWRTZpdsWgEgjL6Q=
226+
golang.org/x/term v0.19.0/go.mod h1:2CuTdWZ7KHSQwUzKva0cbMg6q2DMI3Mmxp+gKJbskEk=
227227
golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
228228
golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
229229
golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=

0 commit comments

Comments
 (0)