forseti-security / helm-charts

Apache License 2.0
8 stars 11 forks source link

Server Config File Scanner rules_path #15

Closed kevensen closed 5 years ago

kevensen commented 5 years ago

Moving forseti-security/forseti-security issues #2625 to this repository.

Re server config file

scanner rules_path defaults to /home/ubuntu/forseti-security/rules

On k8s/docker it needs to be changed to /forseti-security/rules

According to the comments in config file it seems it can also reference gs://[bucket]/rules Perhaps that would be a better default as it works for both VM approach and docker approach?

If gs:// format used, then assume we would not need to download the rules files locally at the start of each scan?