Cant work with Workload Identity

[hsenol1]

Cant work with Workload Identity

[fjogeleit]

I’ll take a look on it

[fjogeleit]

okay, will fix it and prepare another build

[fjogeleit]

there is no interval, it writes each event for new results as soon as a new result was detected

[hsenol1]

I’ll take a look on it

In addition, I tried passingtarget.gcp.credentials: "" and target.gcp.secretRef: "secretName"
but still, have the same log output.

[fjogeleit]

I merged a fix for it, I try to release it at the end of the week. Do you want a test build you can try?

[hsenol1]

Definitely, if you can provide a new image and tag, I'd like to try it. Thanks for such a quick solution.

[hsenol1]

So how can I access the test build? I checked the CI pipeline but couldn't figure it out.

[fjogeleit]

I created a tag 2.19.0-RC1 which you can test. Just overwrite the image.tag value with 2.19.0-RC1.

[hsenol1]

Tested it, still having the same error.

gcs: enabled: true # GCS (Google Cloud Storage) Service Accout Credentials credentials: "{}" # receive the credentials from an existing secret instead secretRef: "" # Mounted secret path by Secrets Controller, secret should be in json format mountedSecret: "" # GCS Bucket bucket: "trivy-docs" # minimum priority "" < info < warning < critical < error minimumPriority: "" # list of sources which should send to GCS sources: [] # Skip already existing PolicyReportResults on startup skipExistingOnStartup: true # Added as additional properties to each gcs event customFields: {} # filter results send by namespaces, policies and priorities filter: {} # add additional s3 channels with different configurations and filters channels: []

is the configuration I use. The error log is same as in the first post in this issue.

[fjogeleit]

credentials needs to be an empty string, not an empty object string.

[hsenol1]

Also tried that, credentials: "" gives the same error.

[fjogeleit]

which error? error while creating GCS credentials ?

[hsenol1]

In the pod logs, you see it as "1.7151700083750553e+09 error GoogleCloudStorage.Credentials has not been declared"

[fjogeleit]

You can test tag 2.19.0-RC2

[hsenol1]

It says "GoogleCloudStorage configured" now :) Thank you. But I wonder, since there is no information on docs, what is the time interval for that? I mean, it writes to GCP Buckets for every 5 mins, 1 hour or so...

Again, thanks for quick build and solution.