UNCLASSIFIED
Skip to content
GitLab
Projects
Groups
Snippets
Help
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in
Toggle navigation
Open sidebar
Platform One
Big Bang
P
Packages
Security Tools
Anchore Enterprise
Commits
cf2b8ff5
Commit
cf2b8ff5
authored
Feb 04, 2021
by
Micah Nagel
💰
Browse files
docs: update docs
parent
dcdde4a9
Pipeline
#157781
passed with stages
in 3 minutes and 9 seconds
Changes
2
Pipelines
3
Hide whitespace changes
Inline
Side-by-side
Showing
2 changed files
with
14 additions
and
11 deletions
+14
-11
docs/CHART.md
docs/CHART.md
+12
-10
docs/KEYCLOAK.md
docs/KEYCLOAK.md
+2
-1
No files found.
docs/CHART.md
View file @
cf2b8ff5
...
...
@@ -52,7 +52,7 @@ stringData:
values.yaml
:
|-
addons:
anchore:
adminPassword: ""
adminPassword: "
my-super-secret-password
"
```
## Adding Enterprise Components
...
...
@@ -114,7 +114,7 @@ stringData:
addons:
anchore:
postgresql:
e
nabled: true # This enables the built in postgres
e
xternal: false
user: "username"
password: "password"
```
...
...
@@ -129,12 +129,13 @@ stringData:
addons:
anchore:
postgresql:
enabled: false # This disables the built in postgres
endpoint: "host:port" # This is your (already existing) external postgres instance
external: true
user: "username"
password: "password"
host: "postgres.mydomain.com"
port: "5432"
mainDB: "databaseName"
enterpriseF
eedsDB: "databaseName" # Only used
if you want the enterprise feeds database
f
eedsDB: "databaseName" # Only used
for enterprise deployments
```
If you plan to use the UI:
...
...
@@ -146,8 +147,8 @@ stringData:
values.yaml
:
|-
addons:
anchore:
enterpriseUiR
edis:
e
nabled: true # Enable the built in redis
r
edis:
e
xternal: false
password: "password"
```
...
...
@@ -158,10 +159,11 @@ stringData:
values.yaml
:
|-
addons:
anchore:
enterpriseUiR
edis:
e
nabled: true # Enable the built in redis
r
edis:
e
xternal: true
password: "password"
endpoint: "host:port" # This is your already existing external redis instance
host: "redis.mydomain.com"
port: "6379"
```
### Enable SSO
...
...
docs/KEYCLOAK.md
View file @
cf2b8ff5
...
...
@@ -32,10 +32,11 @@ addons:
sso
:
enabled
:
true
clientId
:
"
platform1_a8604cc9-f5e9-4656-802d-d05624370245_bb8-anchore"
# Specific client ID for Anchore
samlDescriptorUrl
:
"
https://login.dso.mil/auth/realms/baby-yoda/protocol/saml/descriptor"
# SAML Descriptor URL for the keycloak instance
roleAttribute
:
"
"
# Optional, set a Keycloak attribute for role mapping - must exist and contain Anchore roles, i.e. read-write, full-control, etc
```
Also make sure you have set up the global oidc settings (realm and host).
For more details on the values being set here, view the "Anchore SSO Reference" below.
NOTE: Local development makes use of login.dsop.io and the necessary values are committed in the values.yaml files in the repo and visible above.
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment