Release 0.23.0 admission-controller Helm Charts (#211)

admission-controller/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
 appVersion: "0.0.1"
-version: 0.21.1
+version: 0.23.0
 name: admission-controller
 description: Lacework admission controller using Lacework proxy scanner
 type: application
@@ -13,6 +13,6 @@ maintainers:
   email: [email protected]
 dependencies:
 - name: proxy-scanner
-  version: 0.21.1
+  version: 0.23.0
   condition: proxy-scanner.enabled
   repository: https://lacework.github.io/helm-charts

admission-controller/generate-certs.sh

@@ -13,6 +13,9 @@ DNS.1 = lacework-admission-controller.lacework.svc
 DNS.2 = lacework-admission-controller.lacework.svc.cluster.local
 DNS.3 = admission.lacework-dev.svc
 DNS.4 = admission.lacework-dev.svc.cluster.local
+DNS.5 = lacework-proxy-scanner.lacework.svc
+DNS.6 = lacework-proxy-scanner.lacework.svc.cluster.local
+DNS.7 = lacework-proxy-scanner.lacework
 [ v3_req ]
 basicConstraints = CA:FALSE
 keyUsage = nonRepudiation, digitalSignature, keyEncipherment
@@ -30,4 +33,4 @@ cat ca.crt | base64 | tr -d '\n' > ca.crt_b64
 
 echo $(pwd)/admission.key_b64
 echo $(pwd)/admission.crt_b64
-echo $(pwd)/ca.crt_b64
+echo $(pwd)/ca.crt_b64

admission-controller/values.yaml

@@ -75,7 +75,7 @@ nodeSelector: {}
 
 deployment:
   image: lacework/lacework-admission-controller
-  tag: 0.21.1
+  tag: 0.23.0
   pullPolicy: Always
   replicaCount: 1
   service:
@@ -93,6 +93,8 @@ proxy-scanner:
     default_registry:
     static_cache_location: /opt/lacework
     scan_public_registries: true
+    # [optional] Location to cache the sbom so future scan requests will use the cached sbom for vulnerability scans
+    manifest_cache_location_beta:
     lacework:
       account_name:
       integration_access_token: