diff --git a/Vagrantfile b/Vagrantfile index d91cced93e..560c534ebc 100644 --- a/Vagrantfile +++ b/Vagrantfile @@ -9,7 +9,7 @@ Vagrant.configure("2") do |config| base_dir = File.dirname(__FILE__) - config.vm.box = "debian/buster64" + config.vm.box = "debian/bullseye64" config.vm.hostname = "securecodebox" # We use the same defaults like Docker Desktop. @@ -45,7 +45,8 @@ Vagrant.configure("2") do |config| # Redirecting STDERR to /dev/null because Minikube print download progress # for the images to STDERR which clutters up the Vagrant output w/ error output! config.vm.provision :shell, privileged: false, inline: "sudo -g docker minikube start 2>/dev/null" - # Install everything from secureCodeBox: + # Install everything from secureCodeBox via install script. + # Hint: The directory where the Vagrantfile lives is mapped into the box under the path /vagrant. config.vm.provision :shell, privileged: false, inline: "sudo -g docker /vagrant/bin/install.sh --all" # Do not automatically install VirtualBox guest additions, if available. diff --git a/hooks/cascading-scans/README.md b/hooks/cascading-scans/README.md index 45ed5b4e57..b6f23872af 100644 --- a/hooks/cascading-scans/README.md +++ b/hooks/cascading-scans/README.md @@ -162,6 +162,7 @@ zap-http zap-baseline-scan non-invasive medium |-----|------|---------|-------------| | hook.image.repository | string | `"docker.io/securecodebox/hook-cascading-scans"` | Hook image repository | | hook.image.tag | string | defaults to the charts version | The image Tag defaults to the charts version if not defined. | +| hook.labels | object | `{}` | Add Kubernetes Labels to the hook definition | | hook.priority | int | `0` | Hook priority. Higher priority Hooks are guaranteed to execute before low priority Hooks. | | hook.ttlSecondsAfterFinished | string | `nil` | Seconds after which the kubernetes job for the hook will be deleted. Requires the Kubernetes TTLAfterFinished controller: https://kubernetes.io/docs/concepts/workloads/controllers/ttlafterfinished/ | diff --git a/hooks/finding-post-processing/README.md b/hooks/finding-post-processing/README.md index 65246f0d18..b76148a523 100644 --- a/hooks/finding-post-processing/README.md +++ b/hooks/finding-post-processing/README.md @@ -89,6 +89,7 @@ The `override` field specifies the desired fields and values that need to be upd |-----|------|---------|-------------| | hook.image.repository | string | `"docker.io/securecodebox/hook-finding-post-processing"` | Hook image repository | | hook.image.tag | string | defaults to the charts version | The image Tag defaults to the charts version if not defined. | +| hook.labels | object | `{}` | Add Kubernetes Labels to the hook definition | | hook.priority | int | `0` | Hook priority. Higher priority Hooks are guaranteed to execute before low priority Hooks. | | hook.ttlSecondsAfterFinished | string | `nil` | Seconds after which the kubernetes job for the hook will be deleted. Requires the Kubernetes TTLAfterFinished controller: https://kubernetes.io/docs/concepts/workloads/controllers/ttlafterfinished/ | | rules | list | `[]` | | diff --git a/hooks/generic-webhook/README.md b/hooks/generic-webhook/README.md index 55e72d4744..c4f9c0ea50 100644 --- a/hooks/generic-webhook/README.md +++ b/hooks/generic-webhook/README.md @@ -57,6 +57,7 @@ Kubernetes: `>=v1.11.0-0` |-----|------|---------|-------------| | hook.image.repository | string | `"docker.io/securecodebox/hook-generic-webhook"` | Hook image repository | | hook.image.tag | string | defaults to the charts version | The image Tag defaults to the charts version if not defined. | +| hook.labels | object | `{}` | Add Kubernetes Labels to the hook definition | | hook.priority | int | `0` | Hook priority. Higher priority Hooks are guaranteed to execute before low priority Hooks. | | hook.ttlSecondsAfterFinished | string | `nil` | Seconds after which the kubernetes job for the hook will be deleted. Requires the Kubernetes TTLAfterFinished controller: https://kubernetes.io/docs/concepts/workloads/controllers/ttlafterfinished/ | | webhookUrl | string | `"http://example.com"` | The URL of your WebHook endpoint | diff --git a/hooks/notification/README.md b/hooks/notification/README.md index 48c4dd3807..d7cc1cf714 100644 --- a/hooks/notification/README.md +++ b/hooks/notification/README.md @@ -346,6 +346,7 @@ To fill your template with data we provide the following objects. | hook.image.pullPolicy | string | `"IfNotPresent"` | Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images | | hook.image.repository | string | `"docker.io/securecodebox/hook-notification"` | Hook image repository | | hook.image.tag | string | defaults to the charts version | Image tag | +| hook.labels | object | `{}` | Add Kubernetes Labels to the hook definition | | hook.priority | int | `0` | Hook priority. Higher priority Hooks are guaranteed to execute before low priority Hooks. | | hook.ttlSecondsAfterFinished | string | `nil` | seconds after which the kubernetes job for the hook will be deleted. Requires the Kubernetes TTLAfterFinished controller: https://kubernetes.io/docs/concepts/workloads/controllers/ttlafterfinished/ | | notificationChannels[0].endPoint | string | `"SOME_ENV_KEY"` | | diff --git a/hooks/persistence-defectdojo/README.md b/hooks/persistence-defectdojo/README.md index 2e4b71839f..e82f740243 100644 --- a/hooks/persistence-defectdojo/README.md +++ b/hooks/persistence-defectdojo/README.md @@ -229,7 +229,8 @@ spec: | defectdojo.url | string | `"http://defectdojo-django.default.svc"` | Url to the DefectDojo Instance | | hook.image.pullPolicy | string | `"IfNotPresent"` | Image pull policy. One of Always, Never, IfNotPresent. Defaults to Always if :latest tag is specified, or IfNotPresent otherwise. More info: https://kubernetes.io/docs/concepts/containers/images#updating-images | | hook.image.repository | string | `"docker.io/securecodebox/hook-persistence-defectdojo"` | Hook image repository | -| hook.image.tag | string | defaults to the charts version | Container image tag | +| hook.image.tag | string | `nil` | Container image tag | +| hook.labels | object | `{}` | Add Kubernetes Labels to the hook definition | | hook.priority | int | `0` | Hook priority. Higher priority Hooks are guaranteed to execute before low priority Hooks. | ## License diff --git a/hooks/persistence-elastic/README.md b/hooks/persistence-elastic/README.md index 4284635768..0521d429fd 100644 --- a/hooks/persistence-elastic/README.md +++ b/hooks/persistence-elastic/README.md @@ -82,6 +82,7 @@ the [Luxon documentation](https://moment.github.io/luxon/docs/manual/formatting. | fullnameOverride | string | `""` | | | hook.image.repository | string | `"docker.io/securecodebox/hook-persistence-elastic"` | Hook image repository | | hook.image.tag | string | defaults to the charts version | The image Tag defaults to the charts version if not defined. | +| hook.labels | object | `{}` | Add Kubernetes Labels to the hook definition | | hook.priority | int | `0` | Hook priority. Higher priority Hooks are guaranteed to execute before low priority Hooks. | | hook.ttlSecondsAfterFinished | string | `nil` | Seconds after which the kubernetes job for the hook will be deleted. Requires the Kubernetes TTLAfterFinished controller: https://kubernetes.io/docs/concepts/workloads/controllers/ttlafterfinished/ | | imagePullSecrets | list | `[]` | | diff --git a/hooks/update-field/README.md b/hooks/update-field/README.md index 9193b163b0..f8bf3ba2d9 100644 --- a/hooks/update-field/README.md +++ b/hooks/update-field/README.md @@ -64,6 +64,7 @@ helm upgrade --install ufh secureCodeBox/update-field-hook --set attribute.name= | attribute.value | string | `"my-own-category"` | The value of the attribute you want to add to each finding result | | hook.image.repository | string | `"docker.io/securecodebox/hook-update-field"` | Hook image repository | | hook.image.tag | string | defaults to the charts version | The image Tag defaults to the charts version if not defined. | +| hook.labels | object | `{}` | Add Kubernetes Labels to the hook definition | | hook.priority | int | `0` | Hook priority. Higher priority Hooks are guaranteed to execute before low priority Hooks. | | hook.ttlSecondsAfterFinished | string | `nil` | Seconds after which the kubernetes job for the hook will be deleted. Requires the Kubernetes TTLAfterFinished controller: https://kubernetes.io/docs/concepts/workloads/controllers/ttlafterfinished/ |