Selectively enabling autodiscovery for services and containers #3043

pantelis-karamolegkos · 2025-05-19T10:42:12Z

pantelis-karamolegkos
May 19, 2025

Assuming I want to enable autodiscovery for

how do I go about it?

By reading the docs, I understand that I have to set

config.resourceInclusion.mode=enabled-per-resource

during helm install.

I also assume it will automatically scan k8s services with the following annotation

auto-discovery.securecodebox.io/enabled=true

This will cover web service (ZAP) scanning.

How about the image scanning process? Where should the above annotation be added?

pod? container? deployment?

Thanks

J12934 · 2025-05-20T18:23:12Z

On the per resource mode it's:

service for the service auto discovery
pod for the container auto discovery (as containers the self's can't have annotations)

0 replies