openscap-openshift

KO | EN

gitlite — search

#hacktoberfest #react #ai #go #android #machine-learning #rust #deep-learning #docker #nodejs #awesome #awesome-list #pytorch #open-source

openscap-openshift

(★ 11)

Openshift template to execute OpenSCAP over a given image

openscap-openshift 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# openscap-openshift

In this demo we are using Host path, they are restricted by default in most SCCs since they provide direct access to the host. We need to grant access to an elevated SCC called `privileged`. Also use project `demo`.

1. Using `minishift` or `oc cluster up` login as `system:admin`:
```
oc login -u system:admin
```
  
2. Give grant access to `privileged` SCC:
```
oc adm policy add-scc-to-user privileged -z default -n demo
```

3. Create the secret (named `docker-registry`) to provide the credentials so the image inspector pod can pull and scan the image:
```
oc secrets new-dockercfg docker-registry \
    --docker-server=<registry-server-url> --docker-username=<username> \
    --docker-password=$(oc whoami -t) --docker-email=<email-address>
```

4. Provide the url for the image to scan (eg. `IMAGE_URL=registry.access.redhat.com/rhel7:latest`)
```
oc process -f image-inspector-template.json \
    -p APPLICATION_NAME=image-inspector -p IMAGE_URL=registry.access.redhat.com/rhel7:latest \
    | oc create -f -
```

or execute the script `create-objects.sh` to create everything you need.

5. In the case you executed the script, you are going to have Jenkins provisioned in the project, so log into Jenkins and go to Manage Plugins and install the Openshift Client Plugin.

6. Now you can go to Builds -> Pipeline, and start the pipeline.

7. Open the result report at `<route url>/api/v1/content/results.html`

8. The app provided by the inspector provides WebDAV sharing to the content of the image scanned, so on Mac you can execute:
```
cadaver http://<route url>/api/v1/content/
```

openscap-openshift

openscap-openshift 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

openscap-openshift

openscap-openshift 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README