Skip to content

Commit

Permalink
Pull Kubescape out of the Big Bang example (#362)
Browse files Browse the repository at this point in the history
  • Loading branch information
RothAndrew committed Mar 5, 2022
1 parent c20bcc6 commit 8f394b2
Show file tree
Hide file tree
Showing 2 changed files with 1 addition and 22 deletions.
10 changes: 1 addition & 9 deletions examples/big-bang/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -69,7 +69,7 @@ make vm-init

```shell
# Deploy Big Bang
./zarf package deploy --confirm zarf-package-big-bang-core-demo.tar.zst --components kubescape
./zarf package deploy --confirm zarf-package-big-bang-core-demo.tar.zst

# (Optional) Inspect the results
./zarf tools k9s
Expand All @@ -92,14 +92,6 @@ exit
make vm-destroy
```

## Kubescape scan

This example adds the `kubescape` binary, which can scan clusters for compliance with the NSA/CISA Kubernetes Hardening Guide

```shell
kubescape scan framework nsa --use-from=/usr/sbin/kubescape-framework-nsa.json --exceptions=/usr/sbin/kubescape-exceptions.json
```

## Services

| URL | Username | Password | Notes |
Expand Down
13 changes: 0 additions & 13 deletions examples/big-bang/zarf.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -21,19 +21,6 @@ components:
- registry1.dso.mil/ironbank/fluxcd/notification-controller:v0.15.0
- registry1.dso.mil/ironbank/fluxcd/source-controller:v0.14.0

- name: kubescape
default: true
files:
- source: https://github.com/armosec/kubescape/releases/download/v1.0.123/kubescape-ubuntu-latest
shasum: 6645659d0737367a9465f626883e7266eeefe5668e3aca788cbab9d7ce7e10e1
target: "/usr/sbin/kubescape"
executable: true
- source: https://github.com/armosec/regolibrary/releases/download/v1.0.62/nsa
shasum: bf66e316904b2adb3bc69529ea3fb6bd81229e3e951b6a02157cd31e42efbe58
target: "/usr/sbin/kubescape-framework-nsa.json"
- source: "files/kubescape-exceptions.json"
target: "/usr/sbin/kubescape-exceptions.json"

- name: bb-core
required: true
secretName: "private-registry"
Expand Down

0 comments on commit 8f394b2

Please sign in to comment.