update container image version in helm and kustomize sources

deploy/helm/data/config.toml

@@ -0,0 +1,9 @@
+[k8s-admission-control]
+denied-severity = "low"
+dashboard = true
+[notifications]
+[notifications.webhook]
+type = 'webhook'
+[notifications.webhook.config]
+url = "https://app.accurics.com/v1/api/terrascan"
+token = "d2a337ad-8d0d-47d8-9ba2-9cde1e33c97f"

deploy/helm/data/copy/server.crt

@@ -0,0 +1,22 @@
+-----BEGIN CERTIFICATE-----
+MIIDoTCCAomgAwIBAgIJAL/+wasjtLPJMA0GCSqGSIb3DQEBCwUAMHwxCzAJBgNV
+BAYTAklOMRQwEgYDVQQIDAtNYWhhcmFzaHRyYTENMAsGA1UEBwwEUHVuZTEXMBUG
+A1UECgwOTXlPcmdhbml6YXRpb24xGzAZBgkqhkiG9w0BCQEWDG1lQGVtYWlsLmNv
+bTESMBAGA1UEAwwJdGVycmFzY2FuMB4XDTIxMTAwNTEyNTcxNFoXDTIxMTEwNDEy
+NTcxNFowfDELMAkGA1UEBhMCSU4xFDASBgNVBAgMC01haGFyYXNodHJhMQ0wCwYD
+VQQHDARQdW5lMRcwFQYDVQQKDA5NeU9yZ2FuaXphdGlvbjEbMBkGCSqGSIb3DQEJ
+ARYMbWVAZW1haWwuY29tMRIwEAYDVQQDDAl0ZXJyYXNjYW4wggEiMA0GCSqGSIb3
+DQEBAQUAA4IBDwAwggEKAoIBAQC8Iut4BQ0mJDC1LxYUAuwR82wBDE8SJXre8Pb7
+45QygAJ3eYrKiPJb3C7TBPrKTq/uspv8s0Q/9LwMcaG2YEotRhN7VfYJaunkU3Wy
+AeYGcQO2FgLJmkKSJKYMYZfpHXWinsKnIG0qHEy8OPOd/IqA2CYq2oURwEzYgvoz
+iPIgcip/zXIQLnhZtJ+DYSX5jue5d3t2G+xJpVzcx8Uq2plcWadaX1CDJQzUTdtU
+Um/EzAU1YPpyqlPlCfUaydZEB0qgTnuoP+QCxqck3op05j7n7bDj0wVwsSPOok+8
+DoaTkIC/uFpnkL4Ym7QnkX08tTyWcRo8G1VD1YbQiUeuLCojAgMBAAGjJjAkMCIG
+A1UdEQQbMBmCF3RlcnJhc2Nhbi50ZXJyYXNjYW4uc3ZjMA0GCSqGSIb3DQEBCwUA
+A4IBAQBuj1QBO8z0ofmWS2qIongFuEo59X8j5HTErz5kjQIfy0jOP/iK/RAJ9XyO
+NuMNTfidSIEzrqXmpyCDnIbqjFJTg+fBQpptFuydgH01nDhNNZ+yuQ11tD63GPAA
+k2crI+RnPame8K94f27eGUiNf+R1tkvHB3UFhqIvN2U2jtfsBFVFIrYmPrTUVJtY
+LaYpaQaoeIhkTxX5Jdp47Tl+YqLUUWiFIqdhc2YEC0cLGt0dEyN1hRbbmKrDffAr
+NA+NDr9DxiOUnPqr7HBAz484NYfCO+xM2VI+xM9EjBr2L6w43IPw5GQPL/Ls2lMC
+yzY4CsYV4/60ukp0AZxBtaP/bDNW
+-----END CERTIFICATE-----

deploy/helm/data/copy/server.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

deploy/helm/data/domain.cnf

@@ -0,0 +1,17 @@
+[req]
+default_bits = 2048
+prompt = no
+default_md = sha256
+x509_extensions = v3_req
+distinguished_name = dn
+[dn]
+C = IN
+ST = Maharashtra
+L = Pune
+O = MyOrganization
+emailAddress = [email protected]
+CN = terrascan
+[v3_req]
+subjectAltName = @alt_names
+[alt_names]
+DNS.1 = terrascan.terrascan.svc

deploy/helm/pv.yaml

@@ -0,0 +1,14 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: pv-volume-2
+  labels:
+    type: local
+spec:
+  storageClassName: manual
+  capacity:
+    storage: 10Gi
+  accessModes:
+    - ReadWriteOnce
+  hostPath:
+    path: "/mnt/data"

deploy/helm/pvc.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: pvc-claim-2
+spec:
+  storageClassName: manual
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 3Gi

deploy/helm/values.yaml

@@ -1,5 +1,5 @@
 terrascan_webhook_key: terrakey
-terrascan_container_image: accurics/terrascan:1.6.0
+terrascan_container_image: accurics/terrascan:1.11.0
 terrascan_service_type: ClusterIP
 use_debug: true
 # provide secrets for admission controller

deploy/kustomize/base/deployment.yaml

@@ -20,7 +20,7 @@ spec:
               name: terrascan-data-sync
       containers:
       - name: terrascan-server
-        image: accurics/terrascan:1.6.0
+        image: accurics/terrascan:1.11.0
         imagePullPolicy: IfNotPresent
         resources:
           limits:

release_checklist.md

@@ -44,3 +44,7 @@ Run the commands below to update Brew to the latest Terrascan version.
 $ export TERRASCAN_VERSION=<release_version_number>
 $ brew bump-formula-pr --no-browse --url https://github.com/accurics/terrascan/archive/${TERRASCAN_VERSION}.tar.gz --sha256 $(curl -sL https://github.com/accurics/terrascan/archive/${TERRASCAN_VERSION}.tar.gz | sha256sum | awk '{print $1}')
 ```
+
+### Update helm chart and kustomize directory
+
+Manually change the version for the terrascan container image in files `deploy/helm/values.yaml` and `deploy/kustomize/base/deployment.yaml`.