Added optional logic for CIS

accuknox · Nov 25, 2024 · 9b48a08 · 9b48a08
1 parent 36f3433
commit 9b48a08
Show file tree

Hide file tree

Showing 4 changed files with 18 additions and 2 deletions.
diff --git a/accuknox-jobs/values.yaml b/accuknox-jobs/values.yaml
@@ -11,10 +11,13 @@ global:
 # Job-specific configurations
 accuknox:
   cis:
-    enabled: "false"
+    enabled: "false"  # Default: CIS job is disabled
+    promptForPlatform: "false"  # By default, platform selection is not prompted
+    toolConfig:
+      platform: ""  # Default platform value (empty unless set)      
   riskassessment:
     enabled: "false"
   # k8tls:
   #   enabled: "false"
   kiem:
-    enabled: "false"
+    enabled: "false"   
diff --git a/knox-jobs/cis-k8s-job/templates/cis-cron-job.yaml b/knox-jobs/cis-k8s-job/templates/cis-cron-job.yaml
@@ -43,6 +43,10 @@ spec:
                 value: {{ .Values.accuknox.tenantId | quote}}
               - name: URL
                 value: {{ .Values.accuknox.url }}
+              {{- if and .Values.accuknox.cis.enabled .Values.accuknox.cis.promptForPlatform }}
+              - name: PLATFORM
+                value: {{ .Values.accuknox.cis.toolConfig.platform | quote }}
+              {{- end }}                
             volumeMounts:
             - mountPath: /data
               name: datapath

diff --git a/knox-jobs/cis-k8s-job/templates/cis-job.yaml b/knox-jobs/cis-k8s-job/templates/cis-job.yaml
@@ -46,6 +46,10 @@ spec:
             value: {{ .Values.accuknox.tenantId | quote}}
           - name: URL
             value: {{ .Values.accuknox.url }}
+          {{- if and .Values.accuknox.cis.enabled .Values.accuknox.cis.promptForPlatform }}
+          - name: PLATFORM
+            value: {{ .Values.accuknox.cis.toolConfig.platform | quote }}
+          {{- end }}            
         volumeMounts:
         - mountPath: /data
           name: datapath

diff --git a/knox-jobs/cis-k8s-job/values.yaml b/knox-jobs/cis-k8s-job/values.yaml
@@ -37,3 +37,8 @@ accuknox:
   tenantId: ""
   url: "cspm.demo.accuknox.com"
   secretName: ""
+  cis:
+    enabled: ""  
+    promptForPlatform: ""  
+    toolConfig:
+      platform: ""