feat: update to sbom-operator@0.8.0

Signed-off-by: Christian Kotzbauer <git@ckotzbauer.de>
This commit is contained in:
Christian Kotzbauer 2022-04-08 07:25:49 +02:00
parent d7bb668729
commit 8f59a8fe5a
3 changed files with 10 additions and 3 deletions

View File

@ -1,8 +1,8 @@
apiVersion: v2 apiVersion: v2
description: Catalogue all images of a Kubernetes cluster to multiple targets with Syft description: Catalogue all images of a Kubernetes cluster to multiple targets with Syft
name: sbom-operator name: sbom-operator
version: 0.7.1 version: 0.8.0
appVersion: 0.7.0 appVersion: 0.8.0
home: https://github.com/ckotzbauer/sbom-operator home: https://github.com/ckotzbauer/sbom-operator
sources: sources:
- https://github.com/ckotzbauer/sbom-operator - https://github.com/ckotzbauer/sbom-operator

View File

@ -31,7 +31,7 @@ The following table lists the configurable parameters of the sbom-operator chart
| Parameter | Description | Default | | Parameter | Description | Default |
| -------------------------------------- | ------------------------------------------------- | ---------------------------------------- | | -------------------------------------- | ------------------------------------------------- | ---------------------------------------- |
| `image.repository` | container image repository | `ghcr.io/ckotzbauer/sbom-operator` | | `image.repository` | container image repository | `ghcr.io/ckotzbauer/sbom-operator` |
| `image.tag` | container image tag | `0.7.0` | | `image.tag` | container image tag | `0.8.0` |
| `image.pullPolicy` | container image pull policy | `IfNotPresent` | | `image.pullPolicy` | container image pull policy | `IfNotPresent` |
| `args` | argument object for cli-args | `{}` | | `args` | argument object for cli-args | `{}` |
| `envVars` | environment variables | `{}` | | `envVars` | environment variables | `{}` |

View File

@ -25,6 +25,13 @@ securityContext:
privileged: false privileged: false
runAsUser: 1001 runAsUser: 1001
runAsNonRoot: true runAsNonRoot: true
allowPrivilegeEscalation: false
readOnlyRootFilesystem: true
seccompProfile:
type: RuntimeDefault
capabilities:
drop:
- ALL
serviceAccount: serviceAccount:
# Specifies whether a ServiceAccount should be created # Specifies whether a ServiceAccount should be created