Viktor

The option is still there: https://github.com/elastisys/compliantkubernetes-apps/blob/main/config/config/common-config.yaml#L92

There is an ongoing PR upstream: https://github.com/opensearch-project/helm-charts/pull/172

Yeah that looks good. The textual explanations can be rather short, but should preferably link to more information.

As part of this issue I'd also like us to expose config to set scan job resources: https://github.com/elastisys/compliantkubernetes-apps/blob/36842695dd80cf80ebed4fa9d2438190b41ab210/helmfile.d/upstream/aquasecurity/trivy-operator/values.yaml#L381 and the scan timeout: https://github.com/elastisys/compliantkubernetes-apps/blob/36842695dd80cf80ebed4fa9d2438190b41ab210/helmfile.d/upstream/aquasecurity/trivy-operator/values.yaml#L359

As part of this, also make sure that the "allow-user-crds" feature does not interfere with the metallb operator. Two possible options: - Add the metallb service accounts as an allowed...