Comments (5)
@vzanlnx Currently we do not support K8S deployment descriptor for Trivy server, but I believe that you can create one relatively easy with our official docker.io/aquasec/trivy:0.4.4
Docker image. Just run a Pod with the server command and args. If you expose it with K8S Service you should be able to connect to it with Trivy client from outside of the cluster.
We've created a follow up issue #77 to consider whether harbor-scanner-trivy should expose twirp endpoint and serve both Harbor and Trivy clients. Feel free to vote on that one and provide more details about your use case there.
from harbor-scanner-trivy.
Hi @vzanlnx ! Thank you for the question. It's a good one.
Trivy client/server mode and Harbor scanner adapter for Trivy are two different things.
To some extent they are similar, but have different intended clients and communication protocols. harbor-scanner-trivy exposes the REST API which is consumed by Harbor core services, whereas Trivy server exposes gRPC endpoint consumable by Trivy client.
That said, the following command won't work:
$ trivy client --remote https://harbor-trivy.mydomain:8443 image:tag
I hope it's clear now. /cc @knqyf263
from harbor-scanner-trivy.
It's not gRPC, but twirp over ProtocolBuffer. Anyway, Trivy client is designed to send a request to Trivy server launched by $ trivy server
exposing twirp endpoint. As @danielpacak said, harbor-scanner-trivy is intended to take a request from Harbor core services. They are different servers.
from harbor-scanner-trivy.
Thanks for your quick answer on this, much appreciated.
So, is there a supported way to deploy a trivy server on k8s in order to use this way I want?
So I may have two trivy deployments in my k8s cluster, one for harbor and another one for use with client --remote
. Is there some doc on this? I didn`t find one.
let me know if my question is not clear.
thanks!
from harbor-scanner-trivy.
Closing this one as we've answered the original question. There's a follow up created #77
from harbor-scanner-trivy.
Related Issues (20)
- Scan report is missing the binary related to vulnerability HOT 1
- the length of usernames and passwords must match with 2.8.2 HOT 8
- About vulnerabilities [email protected] on image docker
- mkdir /home/scanner/.cache/trivy/fanal: permission denied HOT 1
- ERROR: column t0.critical_cnt does not exist HOT 1
- It does not work when scan java program HOT 1
- Trivy status goes unhealthy during the scan
- how to skip java db update when scanning start
- Allow image layer cache (fanal.db) to be stored in Redis HOT 1
- Trivy scan results are not up to date HOT 1
- Trivy redis connection support redis TLS mode HOT 3
- the helm repo has a bogus release with version 0.31.0 HOT 5
- Allow disable metrics api
- Add private repo environment variable HOT 1
- /api/v1/scan API should return 400 to the client when the enabled_capabilities.produces_mime_types not specified HOT 1
- /api/v1/scan/{scan_request_id}/report should send http 400 when the sbom_media_type is missed for sbom scan HOT 1
- trivy should skip to generate sbom for container images that have layers[0].mediaType being not valid HOT 2
- Trivy use a lot space in /var/lib/docker/overlay and grow faster HOT 1
- Specify `--image-src remote`
- Harbor failed to connect on trivy-adapter api since v0.31.0 HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from harbor-scanner-trivy.