Merge branch 'hospath-violation' into 'main'

Hospath violation

See merge request !28

CHANGELOG.md

@@ -3,6 +3,12 @@
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ---
+## [0.0.7-bb.0] - 2021-08-09
+
+### Added
+
+- Add conditional syslog audit integration for twistlock console.
+
 ## [0.0.6-bb.2] - 2021-08-06
 
 ### Added

chart/Chart.yaml

 apiVersion: v2
 name: twistlock
-version: 0.0.6-bb.2
+version: 0.0.7-bb.0
 appVersion: 21.04.412
 dependencies:
   - name: gluon

chart/templates/console/deployment.yaml

@@ -86,6 +86,10 @@ spec:
         configMap:
           name: twistlock-console
       - name: syslog-socket
+        {{- if .Values.console.syslogAuditIntegration.enabled}}
         hostPath:
           path: "/dev/log"
+        {{- else}}
+        emptyDir: {}
+        {{- end}}
 

chart/templates/console/pvc.yaml

@@ -10,3 +10,7 @@ spec:
   resources:
     requests:
       storage: {{ .Values.console.persistence.size }}
+---
+
+
+

chart/values.yaml

@@ -33,6 +33,11 @@ console:
   persistence:
     size: 100Gi
     accessMode: ReadWriteOnce
+# Enable syslog audit feature.
+   ## Make sure when integrating with bigbang - https://repo1.dso.mil/platform-one/big-bang/bigbang/-/blob/master/chart/templates/gatekeeper/values.yaml  there 
+   ## is an exception for   twistlock namespace in volumetypes.
+  syslogAuditIntegration:
+    enabled: false
 
 affinity:
   {}

tests/test-values.yml

@@ -11,6 +11,7 @@ console:
   persistence:
     size: 5Gi
 
+
 bbtests:
   enabled: true
   cypress: