diff --git a/CHANGELOG.md b/CHANGELOG.md index 8d10b2ac87814ccad92a9c5c8919c16e2d43b7cb..9d7278124228ca2cb5cd8d40a6110a17e0d547c1 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,6 +3,12 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). --- +## [0.0.7-bb.0] - 2021-08-09 + +### Added + +- Add conditional syslog audit integration for twistlock console. + ## [0.0.6-bb.2] - 2021-08-06 ### Added diff --git a/chart/Chart.yaml b/chart/Chart.yaml index 9f112b0ef968613747be0f13168efc5263432e43..53f05bd0734f68d53cddf5e565bb84d9fed8d242 100644 --- a/chart/Chart.yaml +++ b/chart/Chart.yaml @@ -1,6 +1,6 @@ apiVersion: v2 name: twistlock -version: 0.0.6-bb.2 +version: 0.0.7-bb.0 appVersion: 21.04.412 dependencies: - name: gluon diff --git a/chart/templates/console/deployment.yaml b/chart/templates/console/deployment.yaml index 40890d67a83ee22c6c2f7d388ab31a2d7926ba49..0410fe51f02ad5f46f1dd390f85675e84e771d41 100644 --- a/chart/templates/console/deployment.yaml +++ b/chart/templates/console/deployment.yaml @@ -86,6 +86,10 @@ spec: configMap: name: twistlock-console - name: syslog-socket + {{- if .Values.console.syslogAuditIntegration.enabled}} hostPath: path: "/dev/log" + {{- else}} + emptyDir: {} + {{- end}} diff --git a/chart/templates/console/pvc.yaml b/chart/templates/console/pvc.yaml index e419f32239c1a85dc5bb0d4f637ca672a2061c62..bf65c917127fb530659758bf3344eb2023ffdc1e 100644 --- a/chart/templates/console/pvc.yaml +++ b/chart/templates/console/pvc.yaml @@ -10,3 +10,7 @@ spec: resources: requests: storage: {{ .Values.console.persistence.size }} +--- + + + diff --git a/chart/values.yaml b/chart/values.yaml index 2854551233b769d27d352ca740a11d5d55ed808b..de04b1f8b5249cd8cce13e265d282256090e80d8 100644 --- a/chart/values.yaml +++ b/chart/values.yaml @@ -33,6 +33,11 @@ console: persistence: size: 100Gi accessMode: ReadWriteOnce +# Enable syslog audit feature. + ## Make sure when integrating with bigbang - https://repo1.dso.mil/platform-one/big-bang/bigbang/-/blob/master/chart/templates/gatekeeper/values.yaml there + ## is an exception for twistlock namespace in volumetypes. + syslogAuditIntegration: + enabled: false affinity: {} diff --git a/tests/test-values.yml b/tests/test-values.yml index b0d2e562ae5ac17eba833a097c88f531003bd85c..bf09ac4ef7800def305e14bfe3a8f083684db13a 100644 --- a/tests/test-values.yml +++ b/tests/test-values.yml @@ -11,6 +11,7 @@ console: persistence: size: 5Gi + bbtests: enabled: true cypress: