diff --git a/helm/trivy/templates/statefulset.yaml b/helm/trivy/templates/statefulset.yaml index 4a931d2ac0b0..f81bee574642 100644 --- a/helm/trivy/templates/statefulset.yaml +++ b/helm/trivy/templates/statefulset.yaml @@ -125,6 +125,11 @@ spec: - mountPath: /home/scanner/.cache name: data readOnly: false + {{- with .Values.trivy.sslCertDir }} + - mountPath: {{ . }} + name: ssl-cert-dir + readOnly: true + {{- end }} {{- if .Values.resources }} resources: {{ toYaml .Values.resources | indent 12 }} @@ -136,3 +141,8 @@ spec: - name: data emptyDir: {} {{- end }} + {{- with .Values.trivy.sslCertDir }} + - name: ssl-cert-dir + hostPath: + path: {{ . }} + {{- end }} diff --git a/helm/trivy/values.yaml b/helm/trivy/values.yaml index 5d8aff36d501..1046cc9cbdf7 100644 --- a/helm/trivy/values.yaml +++ b/helm/trivy/values.yaml @@ -128,6 +128,8 @@ trivy: existingSecret: "" # extraEnvVars to be set on the container extraEnvVars: {} + # sslCertDir can be used to override the system default locations for SSL certificate files directory, example: /ssl/certs + sslCertDir: "" service: # If specified, the name used for the Trivy service.