[DO-1600] Add Trivy on avroid-prod (!37)

[DO-1600]

Co-authored-by: denis.patrakeev <denis.patrakeev@avroid.tech>
Reviewed-on: https://git.avroid.tech/K8s/k8s-configs/pulls/37
This commit is contained in:
Denis Patrakeev
2025-02-24 16:43:02 +03:00
parent 565da97928
commit 05aeb4795e
4 changed files with 136 additions and 1 deletions

View File

@@ -0,0 +1,40 @@
image:
registry: harbor.avroid.tech/docker-hub-proxy
repository: aquasec/trivy
replicaCount: 1
persistence:
enabled: true
storageClass: "san-01-raid6"
accessMode: ReadWriteOnce
size: 5Gi
resources:
requests:
cpu: 200m
memory: 512Mi
limits:
cpu: 1
memory: 1Gi
## Node labels for pod assignment
## Ref: https://kubernetes.io/docs/user-guide/node-selection/
nodeSelector:
node-role.kubernetes.io/worker: ""
ingress:
enabled: true
# From Kubernetes 1.18+ this field is supported in case your ingress controller supports it. When set, you do not need to add the ingress class as annotation.
ingressClassName: "nginx"
annotations:
kubernetes.io/ingress.class: nginx
hosts:
- host: trivy.avroid.tech
path: "/"
# type is only needed for networking.k8s.io/v1 in k8s 1.19+
pathType: Prefix
tls: []
# - secretName: trivy-example-tls
# hosts:
# - trivy.example.com