Commit Graph

4 Commits

Author SHA1 Message Date
1cd89f6bae REFACTOR(falco): remove CPU limit
- Set cpu: null to override chart default (1 core)
- Prevents CPU throttling under high load
2026-01-05 00:40:26 +09:00
bce1bdf12b FIX(trivy): fix Trivy resource limits
- Operator: add 512Mi memory limit
- Scan jobs: increase memory limit 500M -> 768Mi
- Reduce concurrent scan jobs 3 -> 2
2026-01-05 00:40:26 +09:00
589b98a875 REFACTOR(trivy): remove Trivy scan job CPU limit
- Remove CPU limit to prevent throttling
- Optimize scan job performance
2026-01-05 00:40:26 +09:00
8da74949b8 FEAT(trivy): add trivy operator
- for container vulnerability scanning
- Add Trivy Operator Helm chart (v0.31.0)
- Configure ServiceMonitor for Prometheus integration
- Enable vulnerability, config audit, and RBAC scanners
- Use Longhorn storage class for Trivy DB
- Exclude kube-system namespaces from scanning
2026-01-04 23:41:39 +09:00