-
Notifications
You must be signed in to change notification settings - Fork 174
Expand file tree
/
Copy pathenv.sh
More file actions
119 lines (84 loc) · 4.61 KB
/
env.sh
File metadata and controls
119 lines (84 loc) · 4.61 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
#!/usr/bin/env bash
set -e
export STACKROX_NAMESPACE="${STACKROX_NAMESPACE:-stackrox}"
echo "STACKROX_NAMESPACE set to ${STACKROX_NAMESPACE}"
export CENTRAL_NAMESPACE="${CENTRAL_NAMESPACE:-$STACKROX_NAMESPACE}"
echo "CENTRAL_NAMESPACE set to ${CENTRAL_NAMESPACE}"
export SENSOR_NAMESPACE="${SENSOR_NAMESPACE:-$STACKROX_NAMESPACE}"
echo "SENSOR_NAMESPACE set to ${SENSOR_NAMESPACE}"
export CLUSTER_API_ENDPOINT="${CLUSTER_API_ENDPOINT:-central.${CENTRAL_NAMESPACE}:443}"
echo "In-cluster Central endpoint set to $CLUSTER_API_ENDPOINT"
export COLLECTION_METHOD="${COLLECTION_METHOD:-${RUNTIME_SUPPORT:-core_bpf}}"
echo "COLLECTION_METHOD set to $COLLECTION_METHOD"
export SCANNER_SUPPORT=${SCANNER_SUPPORT:-true}
echo "SCANNER_SUPPORT set to $SCANNER_SUPPORT"
export ROX_SCANNER_V4=${ROX_SCANNER_V4:-}
echo "ROX_SCANNER_V4 set to ${ROX_SCANNER_V4}"
export OFFLINE_MODE=${OFFLINE_MODE:-false}
echo "OFFLINE_MODE set to $OFFLINE_MODE"
export ROX_HTPASSWD_AUTH=${ROX_HTPASSWD_AUTH:-true}
echo "ROX_HTPASSWD_AUTH set to $ROX_HTPASSWD_AUTH"
echo "MONITORING_SUPPORT set to ${MONITORING_SUPPORT}"
export MONITORING_ENABLE_PSP=${MONITORING_ENABLE_PSP:-false}
echo "MONITORING_ENABLE_PSP set to ${MONITORING_ENABLE_PSP}"
export CLUSTER=${CLUSTER:-remote}
echo "CLUSTER set to $CLUSTER"
export STORAGE="${STORAGE:-none}"
echo "STORAGE set to ${STORAGE}"
export STORAGE_SIZE="${STORAGE_SIZE:-10}"
echo "STORAGE_SIZE set to ${STORAGE_SIZE}"
export LOCAL_DEPLOYMENT="${LOCAL_DEPLOYMENT:-false}"
echo "LOCAL_DEPLOYMENT set to ${LOCAL_DEPLOYMENT}"
export OUTPUT_FORMAT="${OUTPUT_FORMAT:-kubectl}"
echo "OUTPUT_FORMAT set to ${OUTPUT_FORMAT}"
export HELM_REUSE_VALUES="${HELM_REUSE_VALUES:-false}"
echo "HELM_REUSE_VALUES set to ${HELM_REUSE_VALUES}"
export LOAD_BALANCER="${LOAD_BALANCER:-none}"
echo "LOAD_BALANCER set to ${LOAD_BALANCER}"
export MONITORING_LOAD_BALANCER="${MONITORING_LOAD_BALANCER:-none}"
echo "MONITORING_LOAD_BALANCER set to ${MONITORING_LOAD_BALANCER}"
export ADMISSION_CONTROLLER="${ADMISSION_CONTROLLER:-true}"
echo "ADMISSION_CONTROLLER set to ${ADMISSION_CONTROLLER}"
export ADMISSION_CONTROLLER_UPDATES="${ADMISSION_CONTROLLER_UPDATES:-false}"
echo "ADMISSION_CONTROLLER_UPDATES set to ${ADMISSION_CONTROLLER_UPDATES}"
export ROX_NETWORK_ACCESS_LOG=${ROX_NETWORK_ACCESS_LOG:-false}
echo "ROX_NETWORK_ACCESS_LOG set to $ROX_NETWORK_ACCESS_LOG"
export ROX_DEVELOPMENT_BUILD=true
echo "ROX_DEVELOPMENT_BUILD is set to ${ROX_DEVELOPMENT_BUILD}"
export API_ENDPOINT="${API_ENDPOINT:-localhost:8000}"
echo "API_ENDPOINT is set to ${API_ENDPOINT}"
# BitWarden entry: https://vault.bitwarden.com/#/vault?itemId=b511eda7-63c9-4bbf-8872-b07a0123837a
export ROX_DEV_INTERNAL_SSO_CLIENT_SECRET="${ROX_DEV_INTERNAL_SSO_CLIENT_SECRET:-}"
echo "ROX_DEV_INTERNAL_SSO_CLIENT_SECRET is set to ${ROX_DEV_INTERNAL_SSO_CLIENT_SECRET}"
export ROX_HOTRELOAD="${HOTRELOAD:-false}"
echo "ROX_HOTRELOAD is set to ${ROX_HOTRELOAD}"
export ROX_DECLARATIVE_CONFIGURATION="${ROX_DECLARATIVE_CONFIGURATION:-}"
echo "ROX_DECLARATIVE_CONFIGURATION is set to ${ROX_DECLARATIVE_CONFIGURATION}"
export ROX_MANAGED_CENTRAL="${ROX_MANAGED_CENTRAL:-false}"
echo "ROX_MANAGED_CENTRAL is set to ${ROX_MANAGED_CENTRAL}"
export SENSOR_DEV_RESOURCES="${SENSOR_DEV_RESOURCES:-true}"
echo "SENSOR_DEV_RESOURCES is set to ${SENSOR_DEV_RESOURCES}"
export SENSOR_SCANNER_SUPPORT="${SENSOR_SCANNER_SUPPORT:-false}"
echo "SENSOR_SCANNER_SUPPORT is set to ${SENSOR_SCANNER_SUPPORT}"
export SENSOR_SCANNER_V4_SUPPORT="${SENSOR_SCANNER_V4_SUPPORT:-false}"
echo "SENSOR_SCANNER_V4_SUPPORT is set to ${SENSOR_SCANNER_V4_SUPPORT}"
export TRUSTED_CA_FILE="${TRUSTED_CA_FILE:-}"
if [[ -n "${TRUSTED_CA_FILE}" ]]; then
[[ -f "${TRUSTED_CA_FILE}" ]] || { echo "Trusted CA file ${TRUSTED_CA_FILE} not found"; return 1; }
echo "TRUSTED_CA_FILE is set to ${TRUSTED_CA_FILE}"
else
echo "No TRUSTED_CA_FILE provided"
fi
export ROX_DEFAULT_TLS_CERT_FILE="${ROX_DEFAULT_TLS_CERT_FILE:-}"
export ROX_DEFAULT_TLS_KEY_FILE="${ROX_DEFAULT_TLS_KEY_FILE:-}"
if [[ -n "$ROX_DEFAULT_TLS_CERT_FILE" ]]; then
[[ -f "$ROX_DEFAULT_TLS_CERT_FILE" ]] || { echo "Default TLS certificate ${ROX_DEFAULT_TLS_CERT_FILE} not found"; return 1; }
[[ -f "$ROX_DEFAULT_TLS_KEY_FILE" ]] || { echo "Default TLS key ${ROX_DEFAULT_TLS_KEY_FILE} not found"; return 1; }
echo "Using default TLS certificate/key material from $ROX_DEFAULT_TLS_CERT_FILE, $ROX_DEFAULT_TLS_KEY_FILE"
elif [[ -n "$ROX_DEFAULT_TLS_KEY_FILE" ]]; then
echo "ROX_DEFAULT_TLS_KEY_FILE is nonempty, but ROX_DEFAULT_TLS_CERT_FILE is"
return 1
else
echo "No default TLS certificates provided"
fi
export DEDICATED_COLLECTOR_PRIORITY_CLASS="${DEDICATED_COLLECTOR_PRIORITY_CLASS:-true}"