feat(helm): pass arbitrary env vars to trivy (#3208)

aquasecurity · Nov 29, 2022 · b1a2c4e · b1a2c4e
1 parent bd30e98
commit b1a2c4e
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 0 deletions.
diff --git a/helm/trivy/README.md b/helm/trivy/README.md
@@ -76,6 +76,7 @@ The following table lists the configurable parameters of the Trivy chart and the
 | `trivy.serverToken`                   | The token to authenticate Trivy client with Trivy server                | `` |
 | `trivy.existingSecret`                | existingSecret if an existing secret has been created outside the chart. Overrides gitHubToken, registryUsername, registryPassword, serverToken | `` |
 | `trivy.podAnnotations`                | Annotations for pods created by statefulset                             | `{}` |
+| `trivy.extraEnvVars`                  | extraEnvVars to be set on the container                                 | `{}` |
 | `service.name`                        | If specified, the name used for the Trivy service                       |     |
 | `service.type`                        | Kubernetes service type                                                 | `ClusterIP` |
 | `service.port`                        | Kubernetes service port                                                 | `4954`      |

diff --git a/helm/trivy/templates/configmap.yaml b/helm/trivy/templates/configmap.yaml
@@ -23,3 +23,6 @@ data:
 {{- if .Values.noProxy }}
   NO_PROXY: {{ .Values.noProxy | quote }}
 {{- end }}
+{{- with .Values.trivy.extraEnvVars }}
+  {{- . | toYaml | nindent 2 }}
+{{- end }}
diff --git a/helm/trivy/values.yaml b/helm/trivy/values.yaml
@@ -124,6 +124,8 @@ trivy:
   # existingSecret if an existing secret has been created outside the chart.
   # Overrides gitHubToken, registryUsername, registryPassword, serverToken
   existingSecret: ""
+  # extraEnvVars to be set on the container
+  extraEnvVars: {}
 
 service:
   # If specified, the name used for the Trivy service.