9595 type : object
9696 containers :
9797 properties :
98+ activeDeadline :
99+ description : |-
100+ ActiveDeadline sets a time limit for the scan Job. If the scan does not complete within
101+ this duration, the Job is terminated. Useful for bounding runaway scans that enter GC
102+ thrashing before OOM. Specified as a Go duration string (e.g. "30m", "1h").
103+ No default — if unset, the Job runs until completion or OOM.
104+ type : string
98105 enable :
99106 type : boolean
100107 env :
@@ -341,6 +348,13 @@ spec:
341348 clusterName :
342349 description : ClusterName is the AKS cluster name.
343350 type : string
351+ endpoint :
352+ description : |-
353+ Endpoint optionally overrides the Kubernetes API server endpoint URL.
354+ When set, the init container uses this URL instead of the auto-discovered endpoint.
355+ Must start with "https://".
356+ pattern : ^https://
357+ type : string
344358 loginServer :
345359 description : |-
346360 LoginServer is the ACR login server URL (e.g., "myregistry.azurecr.io").
@@ -370,6 +384,13 @@ spec:
370384 clusterName :
371385 description : ClusterName is the EKS cluster name.
372386 type : string
387+ endpoint :
388+ description : |-
389+ Endpoint optionally overrides the Kubernetes API server endpoint URL.
390+ When set, the init container uses this URL instead of the auto-discovered endpoint.
391+ Must start with "https://".
392+ pattern : ^https://
393+ type : string
373394 region :
374395 description : Region is the AWS region.
375396 type : string
@@ -395,6 +416,13 @@ spec:
395416 clusterName :
396417 description : ClusterName is the GKE cluster name.
397418 type : string
419+ endpoint :
420+ description : |-
421+ Endpoint optionally overrides the Kubernetes API server endpoint URL.
422+ When set, the init container uses this URL instead of the auto-discovered endpoint.
423+ Must start with "https://".
424+ pattern : ^https://
425+ type : string
398426 googleServiceAccount :
399427 description : |-
400428 GoogleServiceAccount is the Google service account to impersonate.
@@ -443,6 +471,12 @@ spec:
443471 type : object
444472 kubernetesResources :
445473 properties :
474+ activeDeadline :
475+ description : |-
476+ ActiveDeadline sets a time limit for the scan Job. If the scan does not complete within
477+ this duration, the Job is terminated. Specified as a Go duration string (e.g. "30m", "1h").
478+ No default — if unset, the Job runs until completion or failure.
479+ type : string
446480 containerImageScanning :
447481 description : |-
448482 DEPRECATED: ContainerImageScanning determines whether container images are being scanned. The current implementation
@@ -465,7 +499,8 @@ spec:
465499 filtering :
466500 description : |-
467501 Filtering allows namespace filtering specific to this external cluster.
468- If not specified, uses the global filtering from MondooAuditConfigSpec.Filtering.
502+ If omitted, the external cluster inherits the global filtering from MondooAuditConfigSpec.Filtering.
503+ Set an empty filtering object to scan all namespaces for this external cluster even when global filtering is configured.
469504 properties :
470505 namespaces :
471506 properties :
@@ -708,6 +743,13 @@ spec:
708743 clusterName :
709744 description : ClusterName is the AKS cluster name.
710745 type : string
746+ endpoint :
747+ description : |-
748+ Endpoint optionally overrides the Kubernetes API server endpoint URL.
749+ When set, the init container uses this URL instead of the auto-discovered endpoint.
750+ Must start with "https://".
751+ pattern : ^https://
752+ type : string
711753 loginServer :
712754 description : |-
713755 LoginServer is the ACR login server URL (e.g., "myregistry.azurecr.io").
@@ -737,6 +779,13 @@ spec:
737779 clusterName :
738780 description : ClusterName is the EKS cluster name.
739781 type : string
782+ endpoint :
783+ description : |-
784+ Endpoint optionally overrides the Kubernetes API server endpoint URL.
785+ When set, the init container uses this URL instead of the auto-discovered endpoint.
786+ Must start with "https://".
787+ pattern : ^https://
788+ type : string
740789 region :
741790 description : Region is the AWS region.
742791 type : string
@@ -762,6 +811,13 @@ spec:
762811 clusterName :
763812 description : ClusterName is the GKE cluster name.
764813 type : string
814+ endpoint :
815+ description : |-
816+ Endpoint optionally overrides the Kubernetes API server endpoint URL.
817+ When set, the init container uses this URL instead of the auto-discovered endpoint.
818+ Must start with "https://".
819+ pattern : ^https://
820+ type : string
765821 googleServiceAccount :
766822 description : |-
767823 GoogleServiceAccount is the Google service account to impersonate.
0 commit comments