Comments (5)
To be honest @danielpacak, I don't really know whether it has better support. When I researched this, I saw that it has native support for Sentinel but I haven't really looked at the implementation because harbor-scanner-trivy
already uses redigo
. I will take a quick look and update if anything comes up!
from harbor-scanner-trivy.
Hi @danielpacak
I would like to make the env in harbor configured as
- for in cluster redis
SCANNER_STORE_REDIS_URL=redis://redis:6379/5
- for sentinel redis
SCANNER_STORE_REDIS_URL=redis+sentinel://redis-cluster_sentinel_1:26379,redis-cluster_sentinel_2:26379,redis-cluster_sentinel_3:26379/mymaster/5
Is that OK?
from harbor-scanner-trivy.
Hi @danielpacak
I would like to make the env in harbor configured as
- for in cluster redis
SCANNER_STORE_REDIS_URL=redis://redis:6379/5
- for sentinel redis
SCANNER_STORE_REDIS_URL=redis+sentinel://redis-cluster_sentinel_1:26379,redis-cluster_sentinel_2:26379,redis-cluster_sentinel_3:26379/mymaster/5
Is that OK?
Hi @bitsf . Yes, I think we can support such URL schema
from harbor-scanner-trivy.
I was trying to implement Redis Sentinel support for harbor-scanner-trivy
for quite some time but there isn't a good library that can be readily used. harbor-scanner-trivy
uses redigo
, which itself doesn't provide Sentinel support. Sentinel is a library that is an extension to redigo
for Sentinel support but it implements the protocol described here only partially. What I mean is that the library manages to identify the master and read from/write to it. In case of a failover, the new master is also identified properly. Yet, the library doesn't make use of the slaves. All queries are sent to the master (both read and write), as opposed to writing only to master and load balancing the read queries to the slaves.
from harbor-scanner-trivy.
I was trying to implement Redis Sentinel support for
harbor-scanner-trivy
for quite some time but there isn't a good library that can be readily used.harbor-scanner-trivy
usesredigo
, which itself doesn't provide Sentinel support. Sentinel is a library that is an extension toredigo
for Sentinel support but it implements the protocol described here only partially. What I mean is that the library manages to identify the master and read from/write to it. In case of a failover, the new master is also identified properly. Yet, the library doesn't make use of the slaves. All queries are sent to the master (both read and write), as opposed to writing only to master and load balancing the read queries to the slaves.
That's great feedback @hrist0stoichev Do you happen to know if this one https://github.com/go-redis/redis has by any chance a better support for Sentinel?
from harbor-scanner-trivy.
Related Issues (20)
- harbor integration trivy report Unhealthy HOT 5
- Missing attribute preferred_cvss in the report json
- File containing the security issue (target) is not stored
- Trivy cache is growing too fast
- Scan report is missing the binary related to vulnerability HOT 1
- the length of usernames and passwords must match with 2.8.2 HOT 8
- About vulnerabilities [email protected] on image docker
- mkdir /home/scanner/.cache/trivy/fanal: permission denied HOT 1
- ERROR: column t0.critical_cnt does not exist HOT 1
- It does not work when scan java program HOT 1
- Trivy status goes unhealthy during the scan
- how to skip java db update when scanning start
- Allow image layer cache (fanal.db) to be stored in Redis HOT 1
- Trivy scan results are not up to date HOT 1
- Trivy redis connection support redis TLS mode HOT 3
- the helm repo has a bogus release with version 0.31.0 HOT 5
- Allow disable metrics api
- Add private repo environment variable HOT 1
- /api/v1/scan API should return 400 to the client when the enabled_capabilities.produces_mime_types not specified HOT 1
- /api/v1/scan/{scan_request_id}/report should send http 400 when the sbom_media_type is missed for sbom scan HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from harbor-scanner-trivy.