feat: add new features section

charts/registry-scanner/Chart.yaml

@@ -4,7 +4,7 @@ description: Sysdig Registry Scanner
 type: application
 home: https://www.sysdig.com/
 icon: https://avatars.githubusercontent.com/u/5068817?s=200&v=4
-version: 1.10.4
-appVersion: 0.11.3
+version: 1.10.5
+appVersion: 0.11.4
 maintainers:
   - name: sysdiglabs

charts/registry-scanner/README.md

@@ -141,7 +141,7 @@ Use the following command to deploy:
 helm upgrade --install registry-scanner \
    --namespace sysdig-agent \
    --create-namespace \
-   --version=1.10.4 \
+   --version=1.10.5 \
    --set config.secureBaseURL=<SYSDIG_SECURE_URL> \
    --set config.secureAPIToken=<SYSDIG_SECURE_API_TOKEN> \
    --set config.secureSkipTLS=true \

charts/registry-scanner/templates/configmap.yaml

@@ -144,4 +144,11 @@ data:
     reportPath: /output/registry-scanner-{DATE}.json
     {{- end }}
 
+    {{- if .Values.config.features }}
+    features:
+      {{- if hasKey .Values.config.features "force_scan_status_enabled" }}
+      force_scan_status_enabled: {{ .Values.config.features.force_scan_status_enabled }}
+      {{- end }}
+    {{- end }}
+
     vulnerabilityDBVersion: {{ .Values.config.vulnerabilityDBVersion | default "v2" | quote }}

charts/registry-scanner/tests/configmap_test.yaml

@@ -369,3 +369,42 @@ tests:
       - matchRegex:
           path: data['config.yaml']
           pattern: "scan:((.|\n)*)inlineScanImage: custom-registry.com/custom/scanner:v1.0.0-fips\n"
+
+  - it: features section is not present by default
+    asserts:
+      - notMatchRegex:
+          path: data['config.yaml']
+          pattern: "features:"
+
+  - it: features section is present when force_scan_status_enabled is set to false
+    set:
+      config:
+        features:
+          force_scan_status_enabled: false
+    asserts:
+      - matchRegex:
+          path: data['config.yaml']
+          pattern: "features:\n\\s*force_scan_status_enabled: false"
+
+  - it: features section is present when force_scan_status_enabled is set to true
+    set:
+      config:
+        features:
+          force_scan_status_enabled: true
+    asserts:
+      - matchRegex:
+          path: data['config.yaml']
+          pattern: "features:\n\\s*force_scan_status_enabled: true"
+
+  - it: features section handles only defined fields
+    set:
+      config:
+        features:
+          force_scan_status_enabled: true
+    asserts:
+      - matchRegex:
+          path: data['config.yaml']
+          pattern: "features:\n\\s*force_scan_status_enabled: true"
+      - notMatchRegex:
+          path: data['config.yaml']
+          pattern: "features:((.|\n)*)other_field"