fix: add excluded namespaces

cyscale · Jul 13, 2024 · c97df1c · c97df1c
1 parent 029b2a4
commit c97df1c
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 2 deletions.
diff --git a/charts/kubernetes-agent/Chart.yaml b/charts/kubernetes-agent/Chart.yaml
@@ -1,8 +1,8 @@
 apiVersion: v2
 name: kubernetes-agent
 description: A Helm chart used to deploy the Cyscale Kubernetes agent.
-version: 1.4.0
-appVersion: v0.25.0
+version: 1.4.1
+appVersion: v0.28.1
 type: application
 
 icon: https://media.licdn.com/dms/image/C4D0BAQEonulGiwwtgA/company-logo_200_200/0/1630511856380/cyscale_logo?e=2147483647&v=beta&t=92c83G4PnWeieXQS9VPy7DbbL5vLHqQjQzutDCPqaM8
diff --git a/charts/kubernetes-agent/templates/secret.yaml b/charts/kubernetes-agent/templates/secret.yaml
@@ -16,3 +16,4 @@ stringData:
     resourcesToScan: {{- toYaml .Values.config.resourcesToScan | nindent 4 }}
     cyscaleAPIKey: {{.Values.config.cyscaleAPIKey | quote}}
     collectSBOMs: {{.Values.config.collectSBOMs}}
+    sbom: {{- toYaml .Values.config.sbom | nindent 6 }}
diff --git a/charts/kubernetes-agent/values.yaml b/charts/kubernetes-agent/values.yaml
@@ -9,6 +9,18 @@ config:
   cyscaleAPIKey: ''
   httpClientTimeout: 5s
   collectSBOMs: false
+  sbom:
+    excludedNamespaces:
+      - kube-system
+      - kube-public
+      - kube-node-lease
+      - kubernetes-dashboard
+      - gatekeeper-system
+      - cert-manager
+      - amazon-cloudwatch
+      - app-routing-system
+      - gke-managed-system
+      - istio-system
   resourcesToScan:
     - group: ''
       version: v1