Skip to content

Enable Framework Selection During Helm Installation #566

Open
@AdonisOkpidi

Description

@AdonisOkpidi

Overview

Currently, all frameworks are scanned by default, and there is no existing mechanism to control this behaviour via Helm.

Problem

During installation, it is not possible to specify the framework required for a specific cloud provider. As a result, I must manually extract the necessary controls from the JSON reports, which can be a time-consuming process.

Solution

  1. Introduce a capability similar to Trivy Operator, allowing users to specify one or multiple frameworks in the values.yaml file. See Trivy Operator example.

    specs: 
    - k8s-cis-1.23 
    - k8s-nsa-1.0
    - k8s-pss-baseline-0.1
    - k8s-pss-restricted-0.1

Additionally, enable this configuration through the --set flag in the Helm install command.

Additional Information

# I would want to be able to set for GKE:
frameworks:
- AllControls
- cis-v1.23-t1.0.1

# For AKS:
frameworks:
- cis-aks-t1.2.0

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

  • Status

    Feature

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions