@@ -64,13 +64,58 @@ operator:
6464 tag : 0.9.2
6565 imagePullSecrets : []
6666 transformation :
67- enabled : true
68- scriptConfigMap : " trivy-dojo-transform-script"
67+ enabled : false
6968 scriptFilename : " wrapper.sh"
7069 interpreter : " bash"
7170 scanType : " Generic Findings Import"
71+ # scriptConfigMap: defines the ConfigMap that holds the transformation scripts.
72+ # create: when true, Helm creates and manages the ConfigMap; the name is
73+ # derived automatically from the release. Only data is needed.
74+ # data: map of filename -> script content; only used when create: true.
75+ # ref: name of an existing externally-deployed ConfigMap to mount;
76+ # only used when create: false.
77+ #
78+ # Example — let Helm manage the ConfigMap:
79+ # scriptConfigMap:
80+ # create: true
81+ # data:
82+ # wrapper.sh: |
83+ # #!/bin/bash
84+ # echo "$REPORT_JSON" | python3 /scripts/transform.py
85+ # transform.py: |
86+ # import sys, json
87+ # print(sys.stdin.read())
88+ #
89+ # Example — reference an externally-deployed ConfigMap:
90+ # scriptConfigMap:
91+ # ref: my-transform-scripts
92+ scriptConfigMap :
93+ create : false
94+ ref : " "
95+ data : {}
7296 type : ClusterIP
7397 podSecurityContext :
7498 runAsNonRoot : true
7599 fsGroupChangePolicy : Always
76100 fsGroup : 1000
101+ # rbac.additionalRules: Additional RBAC rules appended to the base ClusterRole.
102+ # These rules are strictly additive — the built-in base rules are always present
103+ # and cannot be removed through this value.
104+ #
105+ # Each entry must be a valid RBAC rule object (apiGroups, resources, verbs).
106+ # The rules below are the ones needed when the transformation feature is used
107+ # to enrich reports with workload context (pods, deployments, jobs, …):
108+ #
109+ # rbac:
110+ # additionalRules:
111+ # - apiGroups: [""]
112+ # resources: [pods, secrets, replicationcontrollers]
113+ # verbs: [list, watch, get]
114+ # - apiGroups: [apps]
115+ # resources: [deployments, statefulsets, daemonsets, replicasets]
116+ # verbs: [get]
117+ # - apiGroups: [batch]
118+ # resources: [jobs, cronjobs]
119+ # verbs: [get]
120+ rbac :
121+ additionalRules : []
0 commit comments