eblume/blumeops
1
1
Fork 0
Code Issues Pull requests Projects Releases 83 Packages Wiki Activity Actions
blumeops/docs/changelog.d
History
Erich Blume d021b3534f
All checks were successful
Build Container / detect (push) Successful in 4s
Details
Build Container / build-dockerfile (prowler) (push) Successful in 10s
Details
Deploy Prowler CIS scanner (#310) 
## Summary
- Deploy Prowler 5 as a weekly CronJob on minikube-indri for CIS Kubernetes Benchmark v1.11 scanning
- Custom slim container build (strips PowerShell, Trivy, and non-K8s providers from upstream)
- Reports (HTML, CSV, JSON-OCSF) written to NFS share on sifaka at `/volume1/reports/prowler/`
- Read-only ClusterRole for pod, RBAC, and control plane inspection
- Host path mounts + hostPID for kubelet file permission checks

## Follow-ups
- Mirror prowler-cloud/prowler on forge for supply chain control
- Build and push container image, update kustomization.yaml newTag
- Consider adding k3s-ringtail scanning (core + RBAC checks only)

## Test plan
- [ ] Build container: `mise run container-release prowler v5.22.0`
- [ ] Update `argocd/manifests/prowler/kustomization.yaml` newTag to built image tag
- [ ] Sync ArgoCD: `argocd app sync apps && argocd app set prowler --revision deploy-prowler && argocd app sync prowler`
- [ ] Trigger manual job: `kubectl create job --from=cronjob/prowler prowler-manual -n prowler --context=minikube-indri`
- [ ] Verify reports appear on sifaka NFS share
- [ ] `mise run services-check`

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Reviewed-on: #310
2026-03-24 16:08:09 -07:00
..
+alerts-dashboard.feature.md Add Grafana alerts dashboard for mobile-friendly alert overview 2026-03-23 21:16:54 -07:00
+argocd-config-doc-review.doc.md Review ArgoCD config tutorial: fix sync policy, typo, add cross-references 2026-03-24 07:55:00 -07:00
+authentik-worker-concurrency.bugfix.md Fix authentik worker OOMKill: limit concurrency to 2 2026-03-23 21:05:16 -07:00
+doc-review-march-2026.doc.md Review 12 reference docs: fix stale image refs, expand stubs, add cross-refs 2026-03-23 09:51:57 -07:00
+fix-apps-outofsync.bugfix.md Fix ArgoCD apps app permanent OutOfSync 2026-03-22 20:42:37 -07:00
+frigate-0.17.1.infra.md Upgrade Frigate 0.17.0-rc2 → 0.17.1, add motion retention tier 2026-03-24 07:30:18 -07:00
.gitkeep Add towncrier changelog system (#86) 2026-02-03 11:48:13 -08:00
decommission-jobsync.infra.md Decommission JobSync service (#308) 2026-03-24 08:44:23 -07:00
deploy-prowler.feature.md Deploy Prowler CIS scanner (#310) 2026-03-24 16:08:09 -07:00
localize-redis.infra.md Localize authentik-redis container (#309) 2026-03-24 13:27:36 -07:00
unify-container-workflows.infra.md Unify container build workflows (#306) 2026-03-23 20:55:50 -07:00
update-tooling-deps-2026-03.infra.md Update tooling dependencies (March 2026) (#307) 2026-03-24 08:11:46 -07:00
upgrade-ntfy-v2.19.2.infra.md Upgrade ntfy v2.17.0 → v2.19.2 (#305) 2026-03-23 10:32:06 -07:00
upgrade-tailscale-operator-1.96.3.infra.md Revert Tailscale operator to v1.94.2 — images not yet published 2026-03-22 19:41:40 -07:00