diff --git a/accuknox-jobs/values.yaml b/accuknox-jobs/values.yaml index b6fdce1..e6fcd46 100644 --- a/accuknox-jobs/values.yaml +++ b/accuknox-jobs/values.yaml @@ -11,10 +11,13 @@ global: # Job-specific configurations accuknox: cis: - enabled: "false" + enabled: "false" # Default: CIS job is disabled + promptForPlatform: "false" # By default, platform selection is not prompted + toolConfig: + platform: "" # Default platform value (empty unless set) riskassessment: enabled: "false" # k8tls: # enabled: "false" kiem: - enabled: "false" + enabled: "false" diff --git a/knox-jobs/cis-k8s-job/templates/cis-cron-job.yaml b/knox-jobs/cis-k8s-job/templates/cis-cron-job.yaml index cd7a81f..bf74839 100644 --- a/knox-jobs/cis-k8s-job/templates/cis-cron-job.yaml +++ b/knox-jobs/cis-k8s-job/templates/cis-cron-job.yaml @@ -43,6 +43,10 @@ spec: value: {{ .Values.accuknox.tenantId | quote}} - name: URL value: {{ .Values.accuknox.url }} + {{- if and .Values.accuknox.cis.enabled .Values.accuknox.cis.promptForPlatform }} + - name: PLATFORM + value: {{ .Values.accuknox.cis.toolConfig.platform | quote }} + {{- end }} volumeMounts: - mountPath: /data name: datapath diff --git a/knox-jobs/cis-k8s-job/templates/cis-job.yaml b/knox-jobs/cis-k8s-job/templates/cis-job.yaml index bef5c29..6d09681 100644 --- a/knox-jobs/cis-k8s-job/templates/cis-job.yaml +++ b/knox-jobs/cis-k8s-job/templates/cis-job.yaml @@ -46,6 +46,10 @@ spec: value: {{ .Values.accuknox.tenantId | quote}} - name: URL value: {{ .Values.accuknox.url }} + {{- if and .Values.accuknox.cis.enabled .Values.accuknox.cis.promptForPlatform }} + - name: PLATFORM + value: {{ .Values.accuknox.cis.toolConfig.platform | quote }} + {{- end }} volumeMounts: - mountPath: /data name: datapath diff --git a/knox-jobs/cis-k8s-job/values.yaml b/knox-jobs/cis-k8s-job/values.yaml index 371e374..bcf1518 100644 --- a/knox-jobs/cis-k8s-job/values.yaml +++ b/knox-jobs/cis-k8s-job/values.yaml @@ -37,3 +37,8 @@ accuknox: tenantId: "" url: "cspm.demo.accuknox.com" secretName: "" + cis: + enabled: "" + promptForPlatform: "" + toolConfig: + platform: "" \ No newline at end of file