Skip to content

Commit 2cc1f49

Browse files
alecmerdleralecmerdler
authored
Merge pull request #31 from alecmerdler/v1.0.2
Release v1.0.2
2 parents 158358e + 335d64b commit 2cc1f49

File tree

4 files changed

+248
-2
lines changed

4 files changed

+248
-2
lines changed

‎deploy/cso.catalogsource.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,4 +4,4 @@ metadata:
44
name: container-security-operator
55
spec:
66
sourceType: grpc
7-
image: quay.io/quay/cso-catalog@sha256:b22225d196d83108733c16b4d9918308ffa18686581970dcb8284f1827c4686d
7+
image: quay.io/quay/cso-catalog@sha256:98dd744acf06d7c61cf7fb0bc2ad837ffb6c091b3da9972638328f2445bb70b5

‎deploy/manifests/container-security-operator/1.0.2/container-security-operator.v1.0.2.clusterserviceversion.yaml‎

Lines changed: 126 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,126 @@
1+
apiVersion: operators.coreos.com/v1alpha1
2+
kind: ClusterServiceVersion
3+
metadata:
4+
annotations:
5+
capabilities: Full Lifecycle
6+
categories: Security
7+
containerImage: quay.io/quay/container-security-operator@sha256:15a4b50d847512b5f404ec1cf72c30c98e073a7f26f1588213bd2e8b6331f016
8+
createdAt: 2019-11-16 01:03:00
9+
description: Identify image vulnerabilities in Kubernetes pods
10+
repository: https://github.com/quay/container-security-operator
11+
tectonic-visibility: ocs
12+
name: container-security-operator.v1.0.2
13+
namespace: placeholder
14+
spec:
15+
customresourcedefinitions:
16+
owned:
17+
- description: Represents a set of vulnerabilities in an image manifest.
18+
displayName: Image Manifest Vulnerability
19+
kind: ImageManifestVuln
20+
name: imagemanifestvulns.secscan.quay.redhat.com
21+
version: v1alpha1
22+
description: "The Container Security Operator (CSO) brings Quay and Clair metadata to Kubernetes / OpenShift.\
23+
\ Starting with vulnerability information the scope will get expanded over time. If it runs on OpenShift,\
24+
\ the corresponding vulnerability information is shown inside the OCP Console. The Container Security Operator\
25+
\ enables cluster administrators to monitor known container\
26+
\ image vulnerabilities in pods running on their Kubernetes cluster. The controller sets up a watch\
27+
\ on pods in the specified namespace(s) and queries the container registry for vulnerability\
28+
\ information. If the container registry supports image scanning,\
29+
\ such as [Quay](https://github.com/quay/quay) with [Clair](https://github.com/quay/clair),\
30+
\ then the Operator will expose any vulnerabilities found via the Kubernetes API in an\
31+
\ `ImageManifestVuln` object. This Operator requires no additional configuration after deployment,\
32+
\ and will begin watching pods and populating `ImageManifestVulns` immediately once installed."
33+
displayName: Container Security
34+
install:
35+
spec:
36+
deployments:
37+
- name: container-security-operator
38+
spec:
39+
replicas: 1
40+
selector:
41+
matchLabels:
42+
name: container-security-operator-alm-owned
43+
template:
44+
metadata:
45+
labels:
46+
name: container-security-operator-alm-owned
47+
name: container-security-operator-alm-owned
48+
spec:
49+
containers:
50+
- command:
51+
- /bin/security-labeller
52+
- '--namespaces=$(WATCH_NAMESPACE)'
53+
env:
54+
- name: MY_POD_NAMESPACE
55+
valueFrom:
56+
fieldRef:
57+
fieldPath: metadata.namespace
58+
- name: MY_POD_NAME
59+
valueFrom:
60+
fieldRef:
61+
fieldPath: metadata.name
62+
- name: WATCH_NAMESPACE
63+
valueFrom:
64+
fieldRef:
65+
fieldPath: metadata.annotations['olm.targetNamespaces']
66+
image: quay.io/quay/container-security-operator@sha256:7998f9377973cdc22d8ad713ba1b81381db9782a4b58d4c89f4bed688e2ff461
67+
name: container-security-operator
68+
serviceAccountName: container-security-operator
69+
permissions:
70+
- rules:
71+
- apiGroups:
72+
- secscan.quay.redhat.com
73+
resources:
74+
- imagemanifestvulns
75+
- imagemanifestvulns/status
76+
verbs:
77+
- '*'
78+
- apiGroups:
79+
- ''
80+
resources:
81+
- pods
82+
- events
83+
verbs:
84+
- '*'
85+
- apiGroups:
86+
- ''
87+
resources:
88+
- secrets
89+
verbs:
90+
- get
91+
serviceAccountName: container-security-operator
92+
strategy: deployment
93+
installModes:
94+
- supported: true
95+
type: OwnNamespace
96+
- supported: true
97+
type: SingleNamespace
98+
- supported: true
99+
type: MultiNamespace
100+
- supported: true
101+
type: AllNamespaces
102+
keywords:
103+
- open source
104+
- containers
105+
- security
106+
labels:
107+
alm-owner-container-security-operator: container-security-operator
108+
operated-by: container-security-operator
109+
icon:
110+
- base64data: iVBORw0KGgoAAAANSUhEUgAAAGQAAABkCAYAAABw4pVUAAAACXBIWXMAAAsSAAALEgHS3X78AAANmElEQVR4nO2dfWxWVx3Hv/d5aWkpbYE5ZNA+DSB03WAlQx1IhIQxTJyhSzY1SrI5tsQ/TISoMcaYsfiHLnGuJv6xhDFYYkx8iStRk7mOMBKkqEzKNmrBsfVpgYmOrm/07Xm55vf0nHJ7z733Oefcc9tC+0mawj2X9nmeL9/fOef3O+dcy7ZtzGY6U9Z2AI0A6tj3agD3Sb7kcwD6ALQD6KLv9Wn7TeGuWcSsEqQzZdGHvd3xJfvBq0JCvcm/6tN2X3TvSo0ZF4SJ0MS+dgs3TA9HAbTQ10yLM2OCsFD0BIDHhcaZ5RUAR2YqtE27IJ0pi0TYF2E4MgWFteb6tH1kOn/ptAnChDgAICU0zm7S9LqnS5jIBWGhiYTYJjTeWpxgwkQayiIThHXWzbOwjwgL9TH7our8IxGkM2XRiIksXiU03h7004CkPm23mH43RgVhrqDw9G2h8fbkFyyMGXOLMUE6U1YdG8vP9tGTaWg01lSftrtM/NyYcEUD1nG3z0ExwN5zO/sMQhNaEDacPX4b9xcy0Hs/zj6LUIQShL2Aw0LD3OVwWFG0BZkXw5fD/6yxfurXWAytTn1eDH8Gc8CoDSyI4dCne+ynfG/0Qdkh82L4w8UgRvPY+48a6yXfm31QcggbSRwXGuaZIoaTshj2b+qxm4UGH6QFYfOMdhOjqXhlNVaf6kJskfyPGhkZQfuLL2Bx8w+FtiCWP38EVY+qZW/+/qejqPje1xEbviG0eeEnBmEBdlkMn7+/xz4pNHogFbLYDLzF1NC2YleTkhiF19B2EoN165AvXyi0+UHCL9rV5NPqTW9vL3oTpRhu3OLZ7iZIDMIGrDEbr79VY0lluWX7kAMmJ3137D8gXAuC3HFtPId82UIM7Hgk4M6pLN67T0t4ou/hPUKbm2JicHI2yrI2pPJeRQVhiUJjuamqx55AcoVaSaT7X+cn/zywo0nKJeSOJXv3CdeDIOEH4iWFO7JL78TQlp2+d8uKwRm30XimxvqJ0OAiUBAWqowWZlTdkclk0H31w8m/y7okjDs4fi5RFYMzmsf3i4WuQEFYPcNYSoTiuao73n/nHHKJ5JRr5JJi6LiDwqITcslw4+Yp13TFAOtPsjaOCQ0OfAVhQ1yjxaXFT6p9SG53cMglQeGEwmJYd3CcbgwjBmfcxuozNZbvB+ErCOvIjVH+wHaUP6BWxe3peFdwB8cvnEAzLLrdwRldux6jazcYEWPy99l4RrjI8BSEzcaN1sBVPySiq7tbuMbx63R1Bg0UFoO4/vAeY2IQWRvVfrN4T0FmgzsuX3oP48lS4boTL5eEHTR4kVm3Hrl1Gzxa9BnPe3cHgiDMHUaX6tD/WlUudpwv+i/cna6pQYMX2a2iG8OQBxJeLhEEYYvYjJFcWaecupBxB8fZ6ZoaNHiR3fIg7DuWebTok7HxNfc/niIIG1kZLcPq9B3dnR3CNT94p6sTFq91p6XcwRnfLYbIMNAM3j3icjskdAnSiY47BgYGJmfLsvR9aY+W8DJh0UkULsnZ+Jbz75OCsFm50XmHzoeUaW1BbEQuy8ohl6i6Iz/Yj9JzfxOuF8O0S2he4py9Ox2ilhYtgk6mlej7+TOoPKa2/qwyNy5cK0bvoWZU/eHlIneJ5DZuhq2QcZYhD/yI3xaZIDq5pP7fv4LM5S5UHntVySX1m7cK14Igd3x8qBmJ69dQ0fZGwJ0idtlCZHbKZ5xlyNn4Ir+tIAgLV8Y2y+hkWon+303kMakwVN7eJrR7Qe5YsmSJR4s/g39pQW5gYrFh7GSr731+ZHc2GXVJxsYnedjiDjGyyIuj447h0ycwfPrmwvLqP/5KuMcLVXcQH70w0bdROiTX+TbiF94R7gkiCpfYwDcRlSA6E0H+IXFkwkl5ZkzZHTwsOnNTyaNy4jvJfs7sRDFn4wuIQhCdXJLbHZxiLlnVcI9wrRgkvDtRGL+g4ZKldxoVJQesg0OQGSvPEh+/7L0og1xSfs67LynJjGHl6jXC9SCGXj+K3nSXZ6Iw2fqqcK0YJofANEmk7zFTi4Sh6Y7MlXShk/Wj8g3vtrUa7rh8sNlTDCJ+tg3W9f8K14Mw7RKatcfYZnwj6LjD3Xe4WXDxbSy4ODWc6Lhj8PQJ/O+UGBan/FyNvsSkS2wb22LshITQUC5Jxx18qBuEuy+pq60NuNubD34WLDyR+GurlktMpebzQJ0xh0ThDo7TJfFsBjUN9wr3BNHfdgL9bcHu4Oi4JGPIJVyQaqFFEZ1MK82WhwL6DjcVbRMTuNq7liOZlM/QEtd+K79wJn72FCzFXFrOUAHLBkpjJkZYOu6gXBKfLctQcaoVZYN9WLVe7eWOXU4rCWIN30CiVX0vpwmX0EjLq0ClxIKGRi13UC5JlU0N65TdkX5e/T8LDYF1XJKvXSVcVyW0IIs1claq7gALiwvv2ShcD0LVHRxtlxhIp4QSRKcARei4Qycs6riDozNRNFHACiWIzodEuSQdd6iGxexgP66/pr+vv+CSU8G5NC/CzkuMbIuexxyhBJGdRzihEEf1EhUo8UgJSBUSi6qw7Cv6SwSo3kEhSBWdeYyTUIJQGptCkCo6AwEd8Vc8pb+iSaeDphBnfXRNuK5C6JCl80FRNVHHJTfOnxWuB1G6MoVlX1Z3ScEdO9Ur2mHdAROCkEtUwwlVE3VccqbjQmFxmwqp72isfNn5SKEqqALVU8K6A0yQ4JXGEkyHS2hh9cii6qILo92oukTXHTpVRzdxCyMxdq5tKHQ6XXJJhcIyoaHNE3WH9NUPlV2iIkhu4xYtd1DVMSwWMBZjW51Do+MS2XkMLRWlxXBEPpFEuuNd4Z4gqjZvQ9VmuTqczjzChDswEa66YuzE59CQS6i+ofRGVqSkFkRcd207SHepv2SZvoSqf1TfUIHqJybcAYcgRhyCiFzSu2ZDYX+Gk0xpGbovvSfcG4SMS3TcYWJkxbEsnIiZPGWTqn8mXUKrQ2486N3P/FtxoTSx4mn/kZ2uO6jKaAo6goMPe0OPtDh6s3dREBJjZOmywlpaLzLJUmWXLN21GwtqvCvWOosVTLqDRlhwzENm1CWUOKQEIoevmyoWQt7XcEmtR19C1b6cKywWw7Q74sAFRCEIHGt0VeB9CReD0tjFckmjydLC2SQqLHvsccElOtU+k2JgwiGvISpBqN5BVUEVCun1z2yfXDcl28F2+OwvD8LpEi13jNzQqpcEYQEvggvCzp09GnC/ElTv6NUoQi1mEziaLfv1HW6G4iVaLkmwLIHOZk6qJlqSRzfJkLTwn/t77EKcd+ayjJ7SrOMSHk5Uc0k6LqERl0xYdBOFO+IW/sz/HJkg5BKdvmTFd59VziUNKe5JJO56eh+yjz4pXC9GYTGdQXdgQoQfO/48AQtb6sWNAHTCVsVDTVq5JFoMpwIVsOzGzyq/vqTG4ocgSixc4uEKHul3o0cx6RSwKisrUaG4Z5BySToLGj6luGDbRAHKTdzCL52XpgjCZu3GJonQnCjW1jcI1/zgmVZaKqrqkuW1KcSy8pljkxNBsMmg+4BMrwKVepwJQMcltavXIJkZE6574exgr7yk9tJp0R0tTZUhCnckLfzafU0QhD3aR22qXQSdzl0mnBQyrWdvbuihZT+0OE6F1evvk3JJQmNzaBAxIOt10LIgCMPoaUCUmh9ULGDJuMQrhKj2JTIuMVWAclIS8x5AeQrCXKL2CQZA6RCZ/RluUgH7QPxySbR0VMclQZgqQHESFvq83AE/QRhGXMJzUzqdbqrhXt9w4uUOjo5LPlESF64jInckLTwrXGT4CsJGXJ62ksW929VUp0uzZS93cMglWcUsQYPPfnfTs3KadwQdPe4rCGMfewCWMl5nFJrqdGVWpl896PuePSkrKxNc4h40hIWOHU9Y2BH0YwIFYbN3sXpUBC8xOGE7Xdlc0pWDzaFdEhQWdVgQw3POWbkXgYJgQpQW9jQyKYLEgGanm7r75hBYNtOaHejTcgnPEvgNGnQpsdC+qcf+QbF/rnL2e9EZvOxRqqou4eFENdMaxiWmy7MJS+60JSlBWOhqCupPVM61pb5E54Mq/eCCUqaVXKK6R4TOTqnKjhU2f5qA+o1SCw8VC1UcIw90MXnI8O1GWQxf3dRj/0b2bSkttmZD4W84r82L4Q89h0pFDOisfmez+IIo82L4M20PBQMTZTiP5+bF8EZXDIR9Fi6dzExPIxMa5jBhxEDYDTv0i+kFCA1zlLBiwMQOKnoB9Gg4q3BUx9yEPYltf1gxYPLx3W/VWFvpaWT8ZLS5Ak362DxDfS2SB8b2qdMLKrVwN6UIhMbbFHqv9J5NiQGTDnFCTyOjB2DZBTffflCIokShTG5KlUgEwUQIS9EDsOhsc6HxFobqGZRCl02FqBKZIBw62JGeuUSP+REabyGo7EqVvqDikgkiF4RDcxZ6zA89WUZonMXQ6hBakGBiBCXDtAnCIWHoyTKzfTRGoydaNzVdQnCmXRAOhTJ6mMls62Ooj6DlnVGHJj9mTBAOdf70/Ax6ZAM9JUC4YRqg/Rm0JYBWoUfVWcsy44I4IXHoKQF0MD2dhR5VWKNwRHv6aBsZ7VyaaRGczCpBvKDQRic+05m29EVHqcoKRR88O66CNuR30T7wmQpFUgD4Px6QRGRh7pGzAAAAAElFTkSuQmCC
111+
mediatype: image/png
112+
maturity: alpha
113+
links:
114+
- name: Source Code
115+
url: https://github.com/quay/container-security-operator
116+
maintainers:
117+
- email: [email protected]
118+
name: Quay Engineering Team
119+
provider:
120+
name: Red Hat
121+
selector:
122+
matchLabels:
123+
alm-owner-container-security-operator: container-security-operator
124+
operated-by: container-security-operator
125+
version: 1.0.2
126+
replaces: container-security-operator.v1.0.1

‎deploy/manifests/container-security-operator/1.0.2/imagemanifestvulns.secscan.quay.redhat.com.crd.yaml‎

Lines changed: 120 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,120 @@
1+
apiVersion: apiextensions.k8s.io/v1beta1
2+
kind: CustomResourceDefinition
3+
metadata:
4+
name: imagemanifestvulns.secscan.quay.redhat.com
5+
spec:
6+
group: secscan.quay.redhat.com
7+
versions:
8+
- name: v1alpha1
9+
served: true
10+
storage: true
11+
scope: Namespaced
12+
names:
13+
plural: imagemanifestvulns
14+
singular: imagemanifestvuln
15+
kind: ImageManifestVuln
16+
listKind: ImageManifestVulnList
17+
shortNames:
18+
- vuln
19+
preserveUnknownFields: false
20+
subresources:
21+
status: {}
22+
validation:
23+
openAPIV3Schema:
24+
type: object
25+
required: ["spec"]
26+
properties:
27+
spec:
28+
type: object
29+
properties:
30+
image:
31+
type: string
32+
minLength: 1
33+
manifest:
34+
type: string
35+
minLength: 1
36+
namespaceName:
37+
type: string
38+
minLength: 1
39+
features:
40+
type: array
41+
items:
42+
type: object
43+
properties:
44+
name:
45+
type: string
46+
minLength: 1
47+
versionformat:
48+
type: string
49+
minLength: 1
50+
namespaceName:
51+
type: string
52+
minLength: 1
53+
version:
54+
type: string
55+
minLength: 1
56+
vulnerabilities:
57+
type: array
58+
items:
59+
type: object
60+
properties:
61+
name:
62+
type: string
63+
minLength: 1
64+
namespaceName:
65+
type: string
66+
minLength: 1
67+
description:
68+
type: string
69+
minLength: 1
70+
link:
71+
type: string
72+
minLength: 1
73+
fixedby:
74+
type: string
75+
minLength: 1
76+
severity:
77+
type: string
78+
minLength: 1
79+
metadata:
80+
type: string
81+
minLength: 1
82+
status:
83+
type: object
84+
properties:
85+
lastUpdate:
86+
type: string
87+
minLength: 1
88+
highestSeverity:
89+
type: string
90+
minLength: 1
91+
unknownCount:
92+
type: integer
93+
minimum: 0
94+
negligibleCount:
95+
type: integer
96+
minimum: 0
97+
lowCount:
98+
type: integer
99+
minimum: 0
100+
mediumCount:
101+
type: integer
102+
minimum: 0
103+
highCount:
104+
type: integer
105+
minimum: 0
106+
criticalCount:
107+
type: integer
108+
minimum: 0
109+
defcon1Count:
110+
type: integer
111+
minimum: 0
112+
fixableCount:
113+
type: integer
114+
minimum: 0
115+
affectedPods:
116+
type: object
117+
additionalProperties:
118+
type: array
119+
items:
120+
type: string

‎deploy/manifests/container-security-operator/container-security-operator.package.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
channels:
2-
- currentCSV: container-security-operator.v1.0.1
2+
- currentCSV: container-security-operator.v1.0.2
33
name: alpha
44
defaultChannel: alpha
55
packageName: container-security-operator

0 commit comments

Comments
 (0)