search

aquasecurity / harbor-scanner-aqua

Aqua Enterprise scanner as a plug-in vulnerability scanner in the Harbor registry
https://goharbor.io
Apache License 2.0
35 stars 15 forks source link

harbor - redis sentinel URL format #113

Open jvaibhav123 opened 2 years ago

jvaibhav123 commented 2 years ago

Dear Team,

The redis-sentinel URL specified is "redis+sentinel://:password@sentinel_host1:port1,sentinel_host2:port2/monitor-name/db-number."

However i have couple of questions -

  1. What needs to specified in "monitor-name"? is it "masterSet" in redis? also what is db-number? is it redis master k8s sts pod no? Also, host would sts-pod.headlesssvc.ns.svc.cluster.local:26379? Note: We are using bitnami redis-ha chart.

  2. What happens if master gets changed due to pod restart or any other issue? Do we have to change this URL to point to correct master?

Could you please help to understand the configuration?

itaysk commented 2 years ago

Hello, this seems to be a question about how to configure Redis and Harbor. Please consult the Redis documentation for information about sentinel https://redis.io/docs/manual/sentinel/

jvaibhav123 commented 2 years ago

Hi The above URL format is specified in this project's helm chart and its not clear the values which needs to specified in URL format.