curl -LO https://get.helm.sh/helm-v3.0.2-linux-amd64.tar.gz tar -xvf helm-v3.0.2-linux-amd64.tar.gz mv linux-amd64/helm /usr/local/bin/
mkdir test cd test git clone https://github.com/grafeas/kritis.git cd kritis/docs/standalone
vi gac.json kubectl create secret generic gac-ca-admin --from-file=gac.json
curl -k --cert grafeas.pem --key grafeas.key -X GET
https://grafeas-server:443/v1beta1/projects
Remember to add to the documentation --key
When there is no Grafeas Server available Kritis succesfully block the deployment of a new pod
➜ standalone git:(helmv3-standalone) ✗ kubectl apply -f pod.yaml
Error from server: error when creating "pod.yaml": admission webhook "kritis-validation-hook.grafeas.io" denied the request: error validating image security policy rpc error: code = Unavailable desc = all SubConns are in TransientFailure, latest connection error: connection error: desc = "transport: Error while dialing dial tcp: lookup grafeas-server on 10.0.0.10:53: no such host"
➜ standalone git:(helmv3-standalone) ✗ kubectl apply -f pod.yaml
Error from server: error when creating "pod.yaml": admission webhook "kritis-validation-hook.grafeas.io" denied the request: found violations in gcr.io/kritis-tutorial/java-with-vulnz@sha256:358687cfd3ec8e1dfeb2bf51b5110e4e16f6df71f64fba01986f720b2fcba68a