Skip to content

Commit

Permalink
feat: Adding another 2 big players to the mix
Browse files Browse the repository at this point in the history
  • Loading branch information
jhutar committed Aug 7, 2024
1 parent c109065 commit bdaf67a
Show file tree
Hide file tree
Showing 2 changed files with 32 additions and 3 deletions.
21 changes: 21 additions & 0 deletions task/clair-scan/0.1/clair-scan.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,13 @@ spec:
- name: get-image-manifests
image: quay.io/redhat-appstudio/konflux-test:v1.4.5@sha256:801a105ba0f9c7f58f5ba5cde1a3b4404009fbebb1028779ca2c5de211e94940
# the clair-in-ci image neither has skopeo or jq installed. Hence, we create an extra step to get the image manifest digests
computeResources:
limits:
memory: 512Mi
cpu: 200m
requests:
memory: 256Mi
cpu: 100m
env:
- name: IMAGE_URL
value: $(params.image-url)
Expand Down Expand Up @@ -58,6 +65,13 @@ spec:
fi
- name: get-vulnerabilities
image: quay.io/redhat-appstudio/clair-in-ci:v1 # explicit floating tag, daily updates, per arch call this is exempt for now for use of image digest
computeResources:
limits:
memory: 4Gi
cpu: '2'
requests:
memory: 1Gi
cpu: 500m
imagePullPolicy: Always
env:
- name: IMAGE_URL
Expand Down Expand Up @@ -94,6 +108,13 @@ spec:
image: quay.io/redhat-appstudio/konflux-test:v1.4.5@sha256:801a105ba0f9c7f58f5ba5cde1a3b4404009fbebb1028779ca2c5de211e94940
# per https://kubernetes.io/docs/concepts/containers/images/#imagepullpolicy-defaulting
# the cluster will set imagePullPolicy to IfNotPresent
computeResources:
limits:
memory: 2Gi
cpu: 500m
requests:
memory: 256Mi
cpu: 100m
securityContext:
capabilities:
add:
Expand Down
14 changes: 11 additions & 3 deletions task/clamav-scan/0.1/clamav-scan.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -43,10 +43,11 @@ spec:
value: $(params.image-digest)
computeResources:
limits:
memory: 4Gi
memory: 8Gi
cpu: '2'
requests:
memory: 512Mi
cpu: 10m
memory: 2Gi
cpu: 500m
script: |
#!/usr/bin/env bash
set -euo pipefail
Expand Down Expand Up @@ -144,6 +145,13 @@ spec:
name: work
- name: upload
image: quay.io/konflux-ci/oras:latest@sha256:f4b891ee3038a5f13cd92ff4f473faad5601c2434d1c6b9bccdfc134d9d5f820
computeResources:
limits:
memory: 512Mi
cpu: 200m
requests:
memory: 256Mi
cpu: 100m
env:
- name: IMAGE_URL
value: $(params.image-url)
Expand Down

0 comments on commit bdaf67a

Please sign in to comment.