Skip to content

introduce SBOM operator

Pierrick Seite requested to merge sbom-operator into main

What does this MR do and why?

This MR introduces an optional unit sbom-operator, which allows to build the Software Bill Of Material (SBOM) of Sylva. The unit deploys an operator generating the SBOM of each image used in a Sylva cluster. By default, the SBOMs is supposed to be exported to a dependency track instance.

Related reference(s)

This MR meets part of requirements stressed in: https://gitlab.com/sylva-projects/sylva/-/blob/rfe-dt/RFE/rfe-dependency-track.md

Test coverage

Tested on a kubeadm-capo deployment with SBOM sent to confimaps and an external dependency track server.

Edited by Pierrick Seite

Merge request reports