K3S-HOME/security
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
94 Commits 1 Branch 0 Tags
8d46ae9e4919931081d8c1d3739402fc5c3de85c
Commit Graph

5 Commits

Author SHA1 Message Date
Mayne0213
7abf679d5e FEAT(goldilocks): add Authelia SSO 
- Add Authelia SSO to goldilocks, karma, trivy ingress
- Enable single sign-on authentication
 2026-01-04 23:41:39 +09:00
Mayne0213
95c756bc7f FEAT(trivy): add trivy-ui Application with ingress 
- Add trivy-ui as separate ArgoCD Application with inline values
- Create ingress.yaml for trivy0213.kro.kr
- Update kustomization.yaml to include ingress
 2026-01-04 23:41:39 +09:00
Mayne0213
a3d971b986 FEAT(trivy): enable Trivy operator for security scanning 
- Uncomment trivy/argocd.yaml in kustomization.yaml
- Enable automated sync in trivy argocd.yaml
 2026-01-04 23:41:39 +09:00
Mayne0213
114307fa4b CHORE(goldilocks): disable Goldilocks and Trivy 
- Comment out goldilocks/argocd.yaml from kustomization
- Comment out trivy/argocd.yaml from kustomization
- Disable autoSync in both applications
- Server overload mitigation
 2026-01-04 23:41:39 +09:00
Mayne0213
8da74949b8 FEAT(trivy): add trivy operator 
- for container vulnerability scanning
- Add Trivy Operator Helm chart (v0.31.0)
- Configure ServiceMonitor for Prometheus integration
- Enable vulnerability, config audit, and RBAC scanners
- Use Longhorn storage class for Trivy DB
- Exclude kube-system namespaces from scanning
 2026-01-04 23:41:39 +09:00