Skip to content

Commit 329b646

Browse files
HN23HN23
authored
Releasing Enterprise 3.11.0 (Anchore 5.19.0)
Enterprise 3.11.0 (Anchore 5.19.0)
2 parents 1594f24 + 3788eb5 commit 329b646

15 files changed

+1298
-38
lines changed

‎.github/workflows/openshift-test.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -168,7 +168,7 @@ jobs:
168168
else
169169
echo "updating nightly-values.yaml with nightly image"
170170
echo 'image: "docker.io/anchore/enterprise-dev:nightly"' >> stable/enterprise/ci/nightly-values.yaml
171-
echo 'ui:' >> stable/enterprise/ci/rc-values.yaml
171+
echo 'ui:' >> stable/enterprise/ci/nightly-values.yaml
172172
echo ' image: "docker.io/anchore/anchore-on-prem-ui-dev:nightly"' >> stable/enterprise/ci/nightly-values.yaml
173173
echo "Appended to stable/enterprise/ci/nightly-values.yaml"
174174
fi

‎.github/workflows/test.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
strategy:
1414
fail-fast: false
1515
matrix:
16-
kubernetesVersion: ["v1.28.7", "v1.29.2", "v1.30.0", "v1.31.0", "v1.32.2"]
16+
kubernetesVersion: ["v1.28.7", "v1.29.2", "v1.30.0", "v1.31.0", "v1.32.2", "v1.33.1"]
1717
runs-on: ubuntu-latest
1818
steps:
1919
- name: Checkout

‎stable/enterprise/Chart.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
apiVersion: v2
22
name: enterprise
3-
version: "3.10.0"
4-
appVersion: "5.18.0"
5-
kubeVersion: 1.23.x - 1.32.x || 1.23.x-x - 1.32.x-x
3+
version: "3.11.0"
4+
appVersion: "5.19.0"
5+
kubeVersion: 1.23.x - 1.33.x || 1.23.x-x - 1.33.x-x
66
description: |
77
Anchore Enterprise is a complete container security workflow solution for professional teams. Easily integrating with CI/CD systems,
88
it allows developers to bolster security without compromising velocity and enables security teams to audit and verify compliance in real-time.

‎stable/enterprise/README.md‎

Lines changed: 11 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -649,7 +649,7 @@ To restore your deployment to using your previous driver configurations:
649649
650650
| Name | Description | Value |
651651
| --------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------- |
652-
| `image` | Image used for all Anchore Enterprise deployments, excluding Anchore UI | `docker.io/anchore/enterprise:v5.18.0` |
652+
| `image` | Image used for all Anchore Enterprise deployments, excluding Anchore UI | `docker.io/anchore/enterprise:v5.19.0` |
653653
| `imagePullPolicy` | Image pull policy used by all deployments | `IfNotPresent` |
654654
| `imagePullSecretName` | Name of Docker credentials secret for access to private repos | `anchore-enterprise-pullcreds` |
655655
| `kubectlImage` | The image to use for the job's init container that uses kubectl to scale down deployments for the migration / upgrade | `bitnami/kubectl:1.30` |
@@ -765,6 +765,7 @@ To restore your deployment to using your previous driver configurations:
765765
| `anchoreConfig.analyzer.enable_hints` | Enable a user-supplied 'hints' file to override and/or augment the software artifacts found during analysis | `false` |
766766
| `anchoreConfig.analyzer.configFile` | Custom Anchore Analyzer configuration file contents in YAML | `{}` |
767767
| `anchoreConfig.catalog.account_prometheus_metrics` | Enable per-account image status prometheus metrics. | `<ALLOW_API_CONFIGURATION>` |
768+
| `anchoreConfig.catalog.analysis_queue_priority` | Allow prioritization of new analysis jobs based on the ingress method. | `<ALLOW_API_CONFIGURATION>` |
768769
| `anchoreConfig.catalog.sbom_vuln_scan.auto_scale` | Automatically scale batch_size and pool_size. Disable to configure manually. | `true` |
769770
| `anchoreConfig.catalog.sbom_vuln_scan.batch_size` | The number of SBOMs to select to scan within a single batch, when 'auto_scale' is disabled | `1` |
770771
| `anchoreConfig.catalog.sbom_vuln_scan.pool_size` | The number of concurrent vulnerability scans to dispatch from each catalog instance | `1` |
@@ -788,7 +789,6 @@ To restore your deployment to using your previous driver configurations:
788789
| `anchoreConfig.catalog.runtime_inventory.inventory_ttl_days` | TTL for runtime inventory. | `120` |
789790
| `anchoreConfig.catalog.runtime_inventory.inventory_ingest_overwrite` | force runtime inventory to be overwritten upon every update for that reported context. | `false` |
790791
| `anchoreConfig.catalog.integrations.integration_health_report_ttl_days` | TTL for integration health reports. | `2` |
791-
| `anchoreConfig.catalog.down_analyzer_task_requeue` | Allows fast re-queueing when image status is 'analyzing' on an analyzer that is no longer in the 'up' state | `true` |
792792
| `anchoreConfig.policy_engine.vulnerabilities.matching.exclude.providers` | List of providers to exclude from matching | `nil` |
793793
| `anchoreConfig.policy_engine.vulnerabilities.matching.exclude.package_types` | List of package types to exclude from matching | `nil` |
794794
| `anchoreConfig.policy_engine.enable_user_base_image` | Enables usage of Well Known Annotation to identify base image for use in ancestry calculations | `true` |
@@ -798,6 +798,7 @@ To restore your deployment to using your previous driver configurations:
798798
| `anchoreConfig.reports.async_execution_timeout` | Configure how long a scheduled query must be running for before it is considered timed out | `48h` |
799799
| `anchoreConfig.reports.cycle_timers.reports_scheduled_queries` | Interval in seconds to check for scheduled queries that need to be run | `600` |
800800
| `anchoreConfig.reports.use_volume` | Configure the reports service to buffer report generation to disk instead of in memory | `false` |
801+
| `anchoreConfig.reports_worker.ingress_images_max_workers` | The maximum number of concurrent threads to ingress images | `10` |
801802
| `anchoreConfig.reports_worker.enable_data_ingress` | Enable periodically syncing data into the Anchore Reports Service | `true` |
802803
| `anchoreConfig.reports_worker.enable_data_egress` | Periodically remove reporting data that has been removed in other parts of system | `false` |
803804
| `anchoreConfig.reports_worker.data_egress_window` | defines a number of days to keep reporting data following its deletion in the rest of system. | `0` |
@@ -824,6 +825,7 @@ To restore your deployment to using your previous driver configurations:
824825
| `anchoreConfig.ui.custom_links` | List of up to 10 external links provided | `{}` |
825826
| `anchoreConfig.ui.enable_add_repositories` | Specify what users can add image repositories to the Anchore UI | `{}` |
826827
| `anchoreConfig.ui.custom_message` | Custom message to display on the login page | `{}` |
828+
| `anchoreConfig.ui.banners` | Provide messages that will be displayed as a banner at the top and/or bottom of the application or only the login page. | `{}` |
827829
| `anchoreConfig.ui.log_level` | Descriptive detail of the application log output | `http` |
828830
| `anchoreConfig.ui.enrich_inventory_view` | aggregate and include compliance and vulnerability data from the reports service. | `true` |
829831
| `anchoreConfig.ui.appdb_config.native` | toggle the postgreSQL drivers used to connect to the database between the native and the NodeJS drivers. | `true` |
@@ -1044,7 +1046,7 @@ To restore your deployment to using your previous driver configurations:
10441046
10451047
| Name | Description | Value |
10461048
| ------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------- |
1047-
| `ui.image` | Image used for the Anchore UI container | `docker.io/anchore/enterprise-ui:v5.18.0` |
1049+
| `ui.image` | Image used for the Anchore UI container | `docker.io/anchore/enterprise-ui:v5.19.0` |
10481050
| `ui.imagePullPolicy` | Image pull policy for Anchore UI image | `IfNotPresent` |
10491051
| `ui.existingSecretName` | Name of an existing secret to be used for Anchore UI DB and Redis endpoints | `anchore-enterprise-ui-env` |
10501052
| `ui.ldapsRootCaCertName` | Name of the custom CA certificate file store in `.Values.certStoreSecretName` | `""` |
@@ -1169,6 +1171,7 @@ To restore your deployment to using your previous driver configurations:
11691171
| `osaaMigrationJob.analysisArchiveMigration.analysis_archive` | The configuration of the catalog.analysis_archive for the dest-config.yaml | `{}` |
11701172
| `osaaMigrationJob.objectStoreMigration.run` | Run the object_store migration | `false` |
11711173
| `osaaMigrationJob.objectStoreMigration.object_store` | The configuration of the object_store for the dest-config.yaml | `{}` |
1174+
| `extraManifests` | List of additional manifests to be included in the chart | `[]` |
11721175
11731176
## Release Notes
11741177
@@ -1178,6 +1181,11 @@ For the latest updates and features in Anchore Enterprise, see the official [Rel
11781181
- **Minor Chart Version Change (e.g., v0.1.2 -> v0.2.0)**: Indicates a significant change to the deployment that does not require manual intervention.
11791182
- **Patch Chart Version Change (e.g., v0.1.2 -> v0.1.3)**: Indicates a backwards-compatible bug fix or documentation update.
11801183
1184+
### V3.11.x
1185+
1186+
- Deploys Anchore Enterprise v5.19.x. See the [Release Notes](https://docs.anchore.com/current/docs/releasenotes/5190/) for more information.
1187+
- Adds a mechanism for adding arbitrary manifests to the helm chart so users can include all resources for the deployment within their helm values file
1188+
11811189
### V3.10.x
11821190
11831191
- Deploys Anchore Enterprise v5.18.x. See the [Release Notes](https://docs.anchore.com/current/docs/releasenotes/5180/) for more information.

‎stable/enterprise/files/default_config.yaml‎

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -64,7 +64,7 @@ webhooks: {{- toYaml .Values.anchoreConfig.webhooks | nindent 2 }}
6464
default_admin_password: "${ANCHORE_ADMIN_PASSWORD}"
6565
default_admin_email: ${ANCHORE_ADMIN_EMAIL}
6666

67-
configuration:
67+
configuration:
6868
api_driven_configuration_enabled: ${ANCHORE_API_DRIVEN_CONFIGURATION_ENABLED}
6969

7070
keys:
@@ -167,8 +167,8 @@ services:
167167
max_worker_threads: ${ANCHORE_CATALOG_IMAGE_GC_WORKERS}
168168
runtime_compliance:
169169
object_store_bucket: "runtime_compliance_check"
170-
down_analyzer_task_requeue: ${ANCHORE_ANALYZER_TASK_REQUEUE}
171170
import_operation_expiration_days: ${ANCHORE_IMPORT_OPERATION_EXPIRATION_DAYS}
171+
analysis_queue_priority: {{ .Values.anchoreConfig.catalog.analysis_queue_priority }}
172172
sbom_vuln_scan:
173173
auto_scale: {{ .Values.anchoreConfig.catalog.sbom_vuln_scan.auto_scale }}
174174
batch_size: {{ .Values.anchoreConfig.catalog.sbom_vuln_scan.batch_size }}
@@ -287,6 +287,7 @@ services:
287287
data_egress_window: ${ANCHORE_ENTERPRISE_REPORTS_DATA_EGRESS_WINDOW}
288288
data_refresh_max_workers: ${ANCHORE_ENTERPRISE_REPORTS_DATA_REFRESH_MAX_WORKERS}
289289
data_load_max_workers: ${ANCHORE_ENTERPRISE_REPORTS_DATA_LOAD_MAX_WORKERS}
290+
ingress_images_max_workers: {{ .Values.anchoreConfig.reports_worker.ingress_images_max_workers }}
290291
cycle_timers: {{- toYaml .Values.anchoreConfig.reports_worker.cycle_timers | nindent 6 }}
291292
runtime_report_generation:
292293
use_legacy_loaders_and_queries: {{ .Values.anchoreConfig.reports_worker.runtime_report_generation.use_legacy_loaders_and_queries }}

‎stable/enterprise/files/osaa_config.yaml‎

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -64,7 +64,7 @@ webhooks: {{- toYaml .Values.anchoreConfig.webhooks | nindent 2 }}
6464
default_admin_password: "${ANCHORE_ADMIN_PASSWORD}"
6565
default_admin_email: ${ANCHORE_ADMIN_EMAIL}
6666

67-
configuration:
67+
configuration:
6868
api_driven_configuration_enabled: ${ANCHORE_API_DRIVEN_CONFIGURATION_ENABLED}
6969

7070
keys:
@@ -167,8 +167,8 @@ services:
167167
max_worker_threads: ${ANCHORE_CATALOG_IMAGE_GC_WORKERS}
168168
runtime_compliance:
169169
object_store_bucket: "runtime_compliance_check"
170-
down_analyzer_task_requeue: ${ANCHORE_ANALYZER_TASK_REQUEUE}
171170
import_operation_expiration_days: ${ANCHORE_IMPORT_OPERATION_EXPIRATION_DAYS}
171+
analysis_queue_priority: {{ .Values.anchoreConfig.catalog.analysis_queue_priority }}
172172
sbom_vuln_scan:
173173
auto_scale: {{ .Values.anchoreConfig.catalog.sbom_vuln_scan.auto_scale }}
174174
batch_size: {{ .Values.anchoreConfig.catalog.sbom_vuln_scan.batch_size }}
@@ -295,6 +295,7 @@ services:
295295
data_egress_window: ${ANCHORE_ENTERPRISE_REPORTS_DATA_EGRESS_WINDOW}
296296
data_refresh_max_workers: ${ANCHORE_ENTERPRISE_REPORTS_DATA_REFRESH_MAX_WORKERS}
297297
data_load_max_workers: ${ANCHORE_ENTERPRISE_REPORTS_DATA_LOAD_MAX_WORKERS}
298+
ingress_images_max_workers: {{ .Values.anchoreConfig.reports_worker.ingress_images_max_workers }}
298299
cycle_timers: {{- toYaml .Values.anchoreConfig.reports_worker.cycle_timers | nindent 6 }}
299300
runtime_report_generation:
300301
use_legacy_loaders_and_queries: {{ .Values.anchoreConfig.reports_worker.runtime_report_generation.use_legacy_loaders_and_queries }}

‎stable/enterprise/templates/envvars_configmap.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,6 @@ data:
1818
ANCHORE_ADMIN_EMAIL: "{{ .Values.anchoreConfig.default_admin_email }}"
1919
ANCHORE_API_DRIVEN_CONFIGURATION_ENABLED: "true"
2020
ANCHORE_ALLOW_ECR_IAM_AUTO: "{{ .Values.anchoreConfig.allow_awsecr_iam_auto }}"
21-
ANCHORE_ANALYZER_TASK_REQUEUE: "true"
2221
ANCHORE_AUTH_ENABLE_HASHED_PASSWORDS: "{{ .Values.anchoreConfig.user_authentication.hashed_passwords }}"
2322
{{- with .Values.anchoreConfig.keys.publicKeyFileName }}
2423
ANCHORE_AUTH_PRIVKEY: "/home/anchore/certs/{{- . }}"
@@ -35,6 +34,7 @@ data:
3534
ANCHORE_CLI_USER: "admin"
3635
ANCHORECTL_URL: "http://localhost:8228"
3736
ANCHORECTL_USERNAME: "admin"
37+
ANCHORECTL_ACCOUNT: "admin"
3838
ANCHORE_DATA_SYNC_AUTO_SYNC_ENABLED: "true"
3939
ANCHORE_DISABLE_METRICS_AUTH: "{{ .Values.anchoreConfig.metrics.auth_disabled }}"
4040
ANCHORE_DB_POOL_MAX_OVERFLOW: "{{ .Values.anchoreConfig.database.db_pool_max_overflow }}"

‎stable/enterprise/templates/extra_manifests.yaml‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
{{ range .Values.extraManifests }}
2+
---
3+
{{ tpl . $ }}
4+
{{ end }}

‎stable/enterprise/templates/tests/anchorectl_smoketest.yaml‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,11 +33,13 @@ spec:
3333
{{- end }}
3434
envFrom: {{- include "enterprise.common.envFrom" . | nindent 6 }}
3535
env: {{- include "enterprise.common.environment" (merge (dict "component" $component) .) | nindent 6 }}
36+
- name: ANCHORECTL_URL
37+
value: "http://{{ .Release.Name }}-enterprise-api:8228"
3638

3739
command: ["/bin/bash", "-c"]
3840
args:
3941
- |
40-
anchorectl system smoke-tests run || true
42+
anchorectl system smoke-tests run
4143
4244
volumeMounts: {{- include "enterprise.common.volumeMounts" . | nindent 6 }}
4345
restartPolicy: Never

‎stable/enterprise/templates/ui_configmap.yaml‎

Lines changed: 18 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,23 @@ data:
2626
title: '{{ .title }}'
2727
message: '{{ .message }}'
2828
{{- end }}
29+
{{- with .Values.anchoreConfig.ui.banners }}
30+
banners:
31+
{{- with .top }}
32+
top:
33+
text: {{ default "" .text | quote }}
34+
text_color: {{ default "" .text_color | quote}}
35+
background_color: {{ default "" .background_color | quote }}
36+
display: {{ default "always" .display | quote }}
37+
{{- end }}
38+
{{- with .bottom }}
39+
bottom:
40+
text: {{ default "" .text | quote }}
41+
text_color: {{ default "" .text_color | quote}}
42+
background_color: {{ default "" .background_color | quote }}
43+
display: {{ default "always" .display | quote }}
44+
{{- end }}
45+
{{- end }}
2946
{{- with .Values.anchoreConfig.ui.enable_add_repositories }}
3047
enable_add_repositories:
3148
admin: {{ .admin }}
@@ -45,7 +62,7 @@ data:
4562
authentication_lock:
4663
count: {{ .Values.anchoreConfig.ui.authentication_lock.count }}
4764
expires: {{ .Values.anchoreConfig.ui.authentication_lock.expires }}
48-
appdb_config: {{ toYaml .Values.anchoreConfig.ui.appdb_config | nindent 6}}
65+
appdb_config: {{- toYaml .Values.anchoreConfig.ui.appdb_config | nindent 6}}
4966
log_level: {{ .Values.anchoreConfig.ui.log_level | squote }}
5067
enrich_inventory_view: {{ .Values.anchoreConfig.ui.enrich_inventory_view }}
5168
enable_prometheus_metrics: {{ .Values.anchoreConfig.metrics.enabled }}

0 commit comments

Comments
 (0)