2.35.1: Image Assurance: packages in use EA; some Container Registries improvements and fixes (#160)

Image Assurance
- A new lightweight agent (armon 0.9.0) to track package usage
- engine, daemon, shim 2.40.0: Harbor, JFrog Artificatory and DockerHub improvements and fixes

Author: chkp-rigor

checkpoint/cloudguard/Chart.yaml

@@ -1,5 +1,5 @@
 apiVersion: v2
-appVersion: 2.34.0
+appVersion: 2.35.1
 description: A Helm chart for Check Point CloudGuard Workload Security
 home: https://portal.checkpoint.com
 icon: https://www.checkpoint.com/wp-content/uploads/icon-cloudguard-nav.png
@@ -25,6 +25,8 @@ keywords:
 - sonatype nexus
 - ghcr
 - github container registry
+- docker hub
+- quay
 - ecs
 - tanzu
 - k3s
@@ -35,4 +37,4 @@ keywords:
 - gke
 - autopilot
 name: cloudguard
-version: 2.34.0
+version: 2.35.1

checkpoint/cloudguard/defaults.yaml

@@ -111,7 +111,7 @@ addons:
       priorityClassName: "system-node-critical"
       ## Specify image and tag
       image: checkpoint/consec-imagescan-daemon
-      tag: 2.38.0
+      tag: 2.40.0
 
       ## Specify existing service account name ("" to create)
       serviceAccountName: ""
@@ -133,7 +133,7 @@ addons:
       shim:
         ## Specify image and tag
         image: checkpoint/consec-imagescan-shim
-        tag: 2.38.0
+        tag: 2.40.0
 
         ## Configure resource requests and limits
         ## ref: http://kubernetes.io/docs/user-guide/compute-resources/
@@ -168,7 +168,7 @@ addons:
     engine:
       ## Specify image and tag
       image: checkpoint/consec-imagescan-engine
-      tag: 2.38.0
+      tag: 2.40.0
 
       ## Specify existing service account name ("" to create)
       serviceAccountName: ""
@@ -200,7 +200,7 @@ addons:
     list:
       ## Specify image and tag
       image: checkpoint/consec-imagescan-engine
-      tag: 2.38.0
+      tag: 2.40.0
 
       ## Specify existing service account name ("" to create)
       serviceAccountName: ""
@@ -233,7 +233,7 @@ addons:
       priorityClassName: "system-node-critical"
       ## Specify image and tag
       image: checkpoint/consec-imagescan-armon
-      tag: 0.6.1
+      tag: 0.9.0
 
       ## Specify existing service account name ("" to create)
       serviceAccountName: ""
@@ -247,10 +247,10 @@ addons:
       resources:
         requests:
           cpu: 100m
-          memory: 500Mi
+          memory: 50Mi
         limits:
           cpu: 100m
-          memory: 500Mi
+          memory: 100Mi
 
       ## Configuration options for nodeSelector, tolerations and affinity for pod
       ## ref: https://kubernetes.io/docs/concepts/configuration/assign-pod-node/

checkpoint/cloudguard/templates/imagescan/armon/daemonset.yaml

@@ -60,13 +60,9 @@ spec:
 {{ toYaml $config.agentConfig.resources | indent 10 }}
 {{- end }}
         env: 
-        - name: REPORT_USE_DOME9_AGENT_CFG
-          value: "1"
-        - name: "REPORT_POST_ENDPOINT"
-          value: "/imageaccessruntimemonitor" 
-        - name: "TELEMETRY_URL"
-          value: "https://eptelemetry.epmgmt.checkpoint.com/gwstats/services/antimalware/1_0_0/log"   
-        - name: "CONTAINERS_RUNTIME"
+        - name: CP_REPORT_USE_DOME9_AGENT_CFG
+          value: "1"  
+        - name: CP_CONTAINERS_RUNTIME
           value: {{ $config.containerRuntime }}
 
 {{ include "common.env" $config | indent 8 }}