Introduction
This document describes how to install the Black Duck OpsSight solution in Pivotal Container Service (PKS).
The steps are from the OpsSight Installation Documentation information that is relevant to PKS.
Synopsys recommends that you become familiar with the installation documentation because it covers several topics that are not covered here.
Overview
OpsSight helps to manage open source risks that are associated with containers in orchestrated environments. The OpsSight solution consists of Synopsys Operator, OpsSight Connector, and a Black Duck server.
...
Black Duck provides the engine for the OpsSight scanner. Scan results are available in your Black Duck instance.
When an image is scanned, OpsSight annotates and labels the associated containers with information such as Black Duck policy violations and the number of vulnerabilities.
These container annotations are used to enforce security policies, and to ensure that vulnerable containers are not deployed in production environments.
Prerequisites
Synopsys recommends reading the Before You Begin and Overview sections of the OpsSight documentation so that you are familiar with the solution before you start the installation.
The following list describes prerequisites for OpsSight on PKS:
...
| Info |
|---|
When you use all defaults, the CPU and memory requirements for the components are as follows:
Deploying the complete OpsSight solution was tested on workers by using the following EC2 instance types:
|
OpsSight and Black Duck deployment
Synopsys recommends that you use Synopsys Operator to install the OpsSight solution in your PKS cluster.
Synopsys Operator is a cloud-native administration utility for Synopsys software that is used for deploying and managing Synopsys software in cloud-native environments such as PKS.
Click here to refer to the steps for installing all components of the OpsSight solution by using the Synopsys Operator.
Deploying Black Duck on Pivotal
Click here to learn how to deploy Black Duck in Pivotal Container Services (PKS).
Post-Deployment: results, and performance tuning
The following information provides details about post-deployment activities.
...