Skip to content

Commit

Permalink
Code-review changes:
Browse files Browse the repository at this point in the history
- Removes customisation of the CA cert since this is generated by `kubewarden-controller` and there's no way to provide a custom one.
- Aligns `--print` flag with kubewarden/audit-scanner#103
  • Loading branch information
nnelas authored and flavio committed Sep 7, 2023
1 parent 3cf87d5 commit dfce163
Show file tree
Hide file tree
Showing 3 changed files with 7 additions and 11 deletions.
6 changes: 2 additions & 4 deletions charts/kubewarden-controller/chart-values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -111,7 +111,5 @@ auditScanner:
# Additional namespaces that the audit scanner will not scan:
skipAdditionalNamespaces: []
logLevel: info
# File path to CA cert in PEM format of PolicyServer endpoints
policyServerCa: "/pki/policy-server-root-ca-pem"
# Prints the result of scan in JSON to stdout
enableJsonReport: true
# Output result of scan to stdout in JSON upon completion
outputScan: true
6 changes: 3 additions & 3 deletions charts/kubewarden-controller/templates/_helpers.tpl
Original file line number Diff line number Diff line change
Expand Up @@ -104,9 +104,9 @@ Create the name of the service account to use for kubewarden-controller
- --loglevel
- {{- .Values.auditScanner.logLevel }}
- --extra-ca
- {{- .Values.auditScanner.policyServerCa }}
{{- if .Values.auditScanner.enableJsonReport }}
- --print
- "/pki/policy-server-root-ca-pem"
{{- if .Values.auditScanner.outputScan }}
- --output-scan
{{- end }}
{{- range .Values.global.skipNamespaces }}
- {{ printf "-i" }}
Expand Down
6 changes: 2 additions & 4 deletions charts/kubewarden-controller/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -147,7 +147,5 @@ auditScanner:
# Additional namespaces that the audit scanner will not scan:
skipAdditionalNamespaces: []
logLevel: info
# File path to CA cert in PEM format of PolicyServer endpoints
policyServerCa: "/pki/policy-server-root-ca-pem"
# Prints the result of scan in JSON to stdout
enableJsonReport: true
# Output result of scan to stdout in JSON upon completion
outputScan: true

0 comments on commit dfce163

Please sign in to comment.