[Enhancement] Get the DefectDojo token via API

[andreasgeisslerdt]

Description

Currently the only option to establish a connection to DefectDojo is to set the API token manually.

defectDojoApiCredentials:
  apiKey: "YOUR_DEFECTDOJO_API_KEY"
  url: "https://YOUR.DEFECTDOJO.URL" 

The token has to be fetched from the DefectDojo UI.
Whenever the DD is restarted the token is changed and the connection is broken until the value is changed and the operator pod is restarted.

If there would be an option to set a username/password for DD and the Operator gets the token via its API, this would be much simpler and the communication can be automatically re-established.

https://demo.defectdojo.org/api/v2/oa3/swagger-ui/
-> /api/v2/api-token-auth

Additional information

No response

[szEvEz]

Hi @andreasgeisslerdt,

thank you for your request. Could you please elaborate a bit more on the issue you're currently having?
I've maintained a bigger DefectDojo installation, and even after upgrades, the api token itself did not change. Could there be an issue with our DD setup?