aquasecurity / deployments Goto Github PK

• A suggestion to add a CONTRIBUTING.md file which provides instructions/guidelines on how to contribute to this project;
  • https://github.com/github/opensource.guide/blob/master/CONTRIBUTING.md

Hi,
I tried to create Aqua Console with template in deployments/server/ecs/cloudformation/aqua-ecs-fargate.
But, the following error occurred.
Cannot find version 11.9 for postgres (Service: AmazonRDS; Status Code: 400; Error Code: InvalidParameterCombination; Request ID: 1d0cf3c3-a21b-49b4-967a-fc71e9cbd5d3; Proxy: null)
I upgraded the version of PostgreSQL embedded in the lines 828 and 853 to 11.12 and it worked.
Would you please fix it if possible.

Noticed that Base64 doesn't work in this aqua-enforcer-token secret, but clear-text does, yet we say on #L3 the token needs to be b64.

Can we remove #L3 or fix to use b64 as we do with our Helm Enforcer deploy?

Incorrectly refers aqua-db instead of aqua-audit-db in aqua-gateway

kubernetes version 1.12
kubectl create -f https://github.com/aquasecurity/deployments/blob/6.5/quick_start/kubernetes_and_openshift/manifests/aqua-csp-quick-default-storage.yaml -n aqua
unable to recognize "aqua-csp-quick-default-storage.yaml": no matches for kind "ValidatingWebhookConfiguration" in version "admissionregistration.k8s.io/v1"
unable to recognize "aqua-csp-quick-default-storage.yaml": no matches for kind "MutatingWebhookConfiguration" in version "admissionregistration.k8s.io/v1"
unable to recognize "aqua-csp-quick-default-storage.yaml": no matches for kind "CustomResourceDefinition" in version "apiextensions.k8s.io/v1"
unable to recognize "aqua-csp-quick-default-storage.yaml": no matches for kind "CustomResourceDefinition" in version "apiextensions.k8s.io/v1"
Change apiversion to v1beta1
error validating "aqua-csp-quick-default-storage.yaml": error validating data: [ValidationError(ValidatingWebhookConfiguration.webhooks[0]): unknown field "admissionReviewVersions" in io.k8s.api.admissionregistration.v1beta1.Webhook, ValidationError(ValidatingWebhookConfiguration.webhooks[0]): unknown field "timeoutSeconds" in io.k8s.api.admissionregistration.v1beta1.Webhook]; if you choose to ignore these errors, turn validation off with --validate=false

For companies that prefer to manage their infrastructure deployments through Terraform, there needs to be a way for them to deploy via Terraform.

I'm working on a PR right now that will have a Terraform module for consumption. However, it's best practice to manage Terraform modules as separate repos. While I'll build this on a fork for now, it's probably best to look at building this as a separate module in a separate repo.

Hi,

It seems since we have been updating the AKS version, this version is now using containerd instead of Docker.
The aqua-agent agent cannot start due to the following error:

Error:
Cannot connect to the Docker daemon at unix://

Aqua-agent is still expecting to use Docker, is there any fix for this ?

Line 256 in the 6.0 and 6.2 yaml

https://github.com/aquasecurity/deployments/blob/6.0/orchestrators/kubernetes/quick_start/aqua-csp-quick-hostpath.yaml

and in the 6.2 yaml
https://github.com/aquasecurity/deployments/blob/6.2/orchestrators/kubernetes/quick_start/aqua-csp-quick-hostpath.yaml

needs modifying from

name: aqua-db

to
name: aqua-db-audit

otherwise the deployment of the service for aqua-db-audit fails.

Hi!
This repo needs a license file!
I would love to add one as part of hacktoberfest!
You could tell me which license I should add or I could add GNU Affero General Public License v3.0 as is the case with the Trivy repo

Hi Aqua Team,

I noticed you are not removing the enforcer tar file after the installation finishes in the install_vme.sh script. My Elastic Beanstalk environment was running out of disk space when I had to debug why and realized that the enforce tar file was still there.

Please add the cleanup option to VM enforcer install script (enforcers/vm_enforcer/shell/install_vme.sh) which removes all unnecessary files. Thank you!

The user id and password is required for the pull of an image from registry.aquasec.com. Can you tell me how do I get my user id?