starboard-operator

README

starboard-operator

This operator for Starboard automatically updates security report resources in response to workload and other changes on a Kubernetes cluster - for example, initiating a vulnerability scan when a new pod is started. Please see the main Starboard repo for more info about the Starboard project.

Contributing

Thanks for taking the time to join our community and start contributing!

• See CONTRIBUTING.md for information about setting up your development environment and deploying the operator.
• Check out the open issues.

Configuration

Name	Default	Description
OPERATOR_NAMESPACE	N/A	The namespace the operator is running in.
OPERATOR_TARGET_NAMESPACES	N/A	The namespace the operator should be watching for changes. This can be a comma separated list of names to watch multiple namespaces (e.g. ns1,ns2).
OPERATOR_SCAN_JOB_TIMEOUT	5m	The length of time to wait before giving up on a scan job
OPERATOR_SCANNER_TRIVY_ENABLED	true	The flag to enable Trivy vulnerability scanner
OPERATOR_SCANNER_TRIVY_VERSION	0.11.0	The version of Trivy to be used
OPERATOR_SCANNER_AQUA_CSP_ENABLED	false	The flag to enable Aqua CSP vulnerability scanner
OPERATOR_SCANNER_AQUA_CSP_VERSION	5.0	The version of Aqua CSP scannercli container image to be used

How does it work?