feat(helm): make sessionAffinity configurable (aquasecurity#4623)

Co-authored-by: knqyf263 <knqyf263@gmail.com>
DmitriyLewen · Jun 21, 2023 · 3e902a5 · 3e902a5
1 parent 904f1cf
commit 3e902a5
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 1 deletion.
diff --git a/helm/trivy/README.md b/helm/trivy/README.md
@@ -81,6 +81,7 @@ The following table lists the configurable parameters of the Trivy chart and the
 | `service.name`                        | If specified, the name used for the Trivy service                       |     |
 | `service.type`                        | Kubernetes service type                                                 | `ClusterIP` |
 | `service.port`                        | Kubernetes service port                                                 | `4954`      |
+| `service.sessionAffinity`             | Kubernetes service session affinity                                     | `ClientIP`  |
 | `httpProxy`                           | The URL of the HTTP proxy server                                        |     |
 | `httpsProxy`                          | The URL of the HTTPS proxy server                                       |     |
 | `noProxy`                             | The URLs that the proxy settings do not apply to                        |     |

diff --git a/helm/trivy/templates/service.yaml b/helm/trivy/templates/service.yaml
@@ -14,4 +14,5 @@ spec:
       protocol: TCP
       port: {{ .Values.service.port | default 4954 }}
       targetPort: {{ .Values.service.port | default 4954 }}
-  sessionAffinity: ClientIP
+  sessionAffinity: {{ .Values.service.sessionAffinity | default "ClientIP" }}
+
diff --git a/helm/trivy/values.yaml b/helm/trivy/values.yaml
@@ -136,6 +136,8 @@ service:
   type: ClusterIP
   # port Kubernetes service port
   port: 4954
+  # sessionAffinity Kubernetes service session affinity
+  sessionAffinity: ClientIP
 
 ingress:
   enabled: false