Skip to content

Commit

Permalink
using hash placeholder instead of latest.
Browse files Browse the repository at this point in the history
  • Loading branch information
iceal lim committed Jan 12, 2021
1 parent 23fe143 commit a56806c
Showing 1 changed file with 5 additions and 2 deletions.
7 changes: 5 additions & 2 deletions docs/cicd.md
Expand Up @@ -62,8 +62,9 @@ Terrascan can be configured as a job during the application sync process using [

![picture](img/terrascan-argo-cd-pipeline.png)


 
### step 1: configure presync resource hook
 

See example hooks yaml where one can simply add it to an existing kubernetes configuration.

Expand All @@ -85,7 +86,7 @@ spec:
secretName: ssh-key-secret
containers:
- name: terrascan-argocd
image: <your container namespace>/<your container build from steps below>:latest
image: <your container namespace>/<your container build from steps below>:<hash>
command: ["/bin/ash", "-c"]
args:
- >
Expand Down Expand Up @@ -114,7 +115,9 @@ Configuring the job to delete only after the specified time see `ttlSecondsAfter

![picture](img/terrascan-argo-cd-resource-hook-logs.png)

&nbsp;
### step 2: create container with the following files (known_hosts, notify_slack.sh, Dockerfile)
&nbsp;

Below is the full example of building the terrascan-argo-cd integration container.

Expand Down

0 comments on commit a56806c

Please sign in to comment.