Merge pull request #1264 from secureCodeBox/bugfix/nuclei-cache-fix · secureCodeBox/secureCodeBox@7af3a65 · GitHub

secureCodeBox / secureCodeBox Public

• Notifications You must be signed in to change notification settings
• Fork 184
• Star 987

• Code
• Issues 63
• Pull requests 3
• Discussions
• Actions
• Projects
• Security and quality 1
• Insights

Additional navigation options

Commit 7af3a65

Browse filesBrowse the repository at this point in the historyBrowse files

J12934

authored

Merge pull request #1264 from secureCodeBox/bugfix/nuclei-cache-fix

Make Nuclei Template Cache PVC `accessMode` configurable

2 parents dae41cd + 1954e91 commit 7af3a65
Copy full SHA for 7af3a65

4 files changed

+7-2Lines changed: 7 additions & 2 deletions

File tree

Expand file treeCollapse file tree

Open diff view settings

Filter options

• scanners/nuclei
  • README.md
  • docs
    • README.ArtifactHub.md
  • templates
    • nuclei-shared-volumeclaim.yaml
  • values.yaml

Expand file treeCollapse file tree

Open diff view settings

Collapse file

‎scanners/nuclei/README.md‎

Copy file name to clipboardExpand all lines: scanners/nuclei/README.md

+1Lines changed: 1 addition & 0 deletions

• Display the source diff
• Display the rich diff

Original file line number	Diff line number	Diff line change
@@ -176,6 +176,7 @@ helm install nuclei secureCodeBox/nuclei --set="nucleiTemplateCache.enabled=fals
176	176	|-----|------|---------|-------------|
177	177	| cascadingRules.enabled | bool | `true` | Enables or disables the installation of the default cascading rules for this scanner |
178	178	| imagePullSecrets | list | `[]` | Define imagePullSecrets when a private registry is used (see: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/) |
	179	+ | nucleiTemplateCache.accessMode | list | `["ReadWriteOnce","ReadOnlyMany"]` | Depending on your setup you can define the pvc access mode for one `ReadWriteOnce` or multiple node clusters `ReadWriteMany` |
179	180	| nucleiTemplateCache.concurrencyPolicy | string | `"Replace"` | Determines how kubernetes handles cases where multiple instances of the cronjob would work if they are running at the same time. See: https://kubernetes.io/docs/tasks/job/automated-tasks-with-cron-jobs/#concurrency-policy |
180	181	| nucleiTemplateCache.enabled | bool | `true` | Enables or disables the use of an persistent volume to cache the always downloaded nuclei-templates for all scans. |
181	182	| nucleiTemplateCache.failedJobsHistoryLimit | int | `10` | Determines how many failed jobs are kept until kubernetes cleans them up. See: https://kubernetes.io/docs/tasks/job/automated-tasks-with-cron-jobs/#jobs-history-limits |

Collapse file

‎scanners/nuclei/docs/README.ArtifactHub.md‎

Copy file name to clipboardExpand all lines: scanners/nuclei/docs/README.ArtifactHub.md

+1Lines changed: 1 addition & 0 deletions

• Display the source diff
• Display the rich diff

Original file line number	Diff line number	Diff line change
@@ -183,6 +183,7 @@ helm install nuclei secureCodeBox/nuclei --set="nucleiTemplateCache.enabled=fals
183	183	|-----|------|---------|-------------|
184	184	| cascadingRules.enabled | bool | `true` | Enables or disables the installation of the default cascading rules for this scanner |
185	185	| imagePullSecrets | list | `[]` | Define imagePullSecrets when a private registry is used (see: https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/) |
	186	+ | nucleiTemplateCache.accessMode | list | `["ReadWriteOnce","ReadOnlyMany"]` | Depending on your setup you can define the pvc access mode for one `ReadWriteOnce` or multiple node clusters `ReadWriteMany` |
186	187	| nucleiTemplateCache.concurrencyPolicy | string | `"Replace"` | Determines how kubernetes handles cases where multiple instances of the cronjob would work if they are running at the same time. See: https://kubernetes.io/docs/tasks/job/automated-tasks-with-cron-jobs/#concurrency-policy |
187	188	| nucleiTemplateCache.enabled | bool | `true` | Enables or disables the use of an persistent volume to cache the always downloaded nuclei-templates for all scans. |
188	189	| nucleiTemplateCache.failedJobsHistoryLimit | int | `10` | Determines how many failed jobs are kept until kubernetes cleans them up. See: https://kubernetes.io/docs/tasks/job/automated-tasks-with-cron-jobs/#jobs-history-limits |

Collapse file

‎scanners/nuclei/templates/nuclei-shared-volumeclaim.yaml‎

Copy file name to clipboardExpand all lines: scanners/nuclei/templates/nuclei-shared-volumeclaim.yaml

+1-2Lines changed: 1 addition & 2 deletions

Original file line number	Diff line number	Diff line change
@@ -11,8 +11,7 @@ metadata:
11	11	name: nuclei-content-claim
12	12	spec:
13	13	accessModes:
14		- - ReadWriteOnce
15		- - ReadOnlyMany
	14	+ {{- toYaml .Values.nucleiTemplateCache.accessMode | nindent 4 }}
16	15	resources:
17	16	requests:
18	17	storage: 1Gi

Collapse file

‎scanners/nuclei/values.yaml‎

Copy file name to clipboardExpand all lines: scanners/nuclei/values.yaml

+4Lines changed: 4 additions & 0 deletions

Original file line number	Diff line number	Diff line change
@@ -94,6 +94,10 @@ scanner:
94	94	nucleiTemplateCache:
95	95	# -- Enables or disables the use of an persistent volume to cache the always downloaded nuclei-templates for all scans.
96	96	enabled: true
	97	+ # -- Depending on your setup you can define the pvc access mode for one `ReadWriteOnce` or multiple node clusters `ReadWriteMany`
	98	+ accessMode:
	99	+ - ReadWriteOnce
	100	+ - ReadOnlyMany
97	101	# every day at 08:00: "0 8 * * *"
98	102	# every full hour: "0 */1 * * *""
99	103	# -- The schedule indicates when and how often the nuclei template cache should be updated

0 commit comments

Comments

0 (0)