How to connect trivy to harbor in k8s cluster?

[hyoung-90]

Hi,

I have deployed harbor(with trivy) and trivy-0 in the k8s cluster using helm chart.

$ k get pod
harbor-core-59f7b8599f-2q8xw            1/1     Running   0          150m
harbor-database-0                       1/1     Running   0          150m
harbor-jobservice-77f5644f56-rrxcc      1/1     Running   0          150m
harbor-nginx-7544fc48db-zjhxw           1/1     Running   0          150m
harbor-notary-server-78d5bb67bb-4fqzh   1/1     Running   0          150m
harbor-notary-signer-59f777df44-5vqwn   1/1     Running   0          150m
harbor-portal-688ffd8575-x4gjl          1/1     Running   0          150m
harbor-redis-0                          1/1     Running   0          150m
harbor-registry-747ffcc798-6wwkf        2/2     Running   0          150m
harbor-trivy-0                          1/1     Running   0          150m
trivy-0                                 1/1     Running   0          90m

$ k get svc
harbor                 NodePort    10.254.232.226   <none>        80:30002/TCP,4443:30004/TCP   154m
harbor-core            ClusterIP   10.254.140.216   <none>        80/TCP                        154m
harbor-database        ClusterIP   10.254.222.131   <none>        5432/TCP                      154m
harbor-jobservice      ClusterIP   10.254.67.192    <none>        80/TCP                        154m
harbor-notary-server   ClusterIP   10.254.155.169   <none>        4443/TCP                      154m
harbor-notary-signer   ClusterIP   10.254.255.229   <none>        7899/TCP                      154m
harbor-portal          ClusterIP   10.254.137.94    <none>        80/TCP                        154m
harbor-redis           ClusterIP   10.254.234.253   <none>        6379/TCP                      154m
harbor-registry        ClusterIP   10.254.157.245   <none>        5000/TCP,8080/TCP             154m
harbor-trivy           ClusterIP   10.254.208.187   <none>        8080/TCP                      154m
trivy                  ClusterIP   10.254.53.129    <none>        4954/TCP                      94m

How can I use trivy-0 in harbor?

I have failed using http://trivy:4954 and http://10.254.53.129:4954 endpoint in harbor. harbor-core pod has errors.

2022-08-22T03:24:16Z [ERROR] [/controller/scanner/base_controller.go:298][error="v1 client: get metadata: general response handler: invalid character 'p' after top-level value" requestID="f15767b3-ee5b-4888-81f7-ba21a7ede4e4"]: failed to ping scanner
2022-08-22T03:24:16Z [ERROR] [/lib/http/error.go:54]: {"errors":[{"code":"UNKNOWN","message":"scanner controller: ping: v1 client: get metadata: general response handler: invalid character 'p' after top-level value"}]} 

[stonezdj]

could you please check if the trivy adapter and the trivy version matched the current Harbor version? if they don't match, then it will get an unexpected response.

[hyoung-90]

Thanks. It works fine using harbor scanner adapter for triry.