Record the status of OCS scans with a config map
This MR addresses Gitlab Agent should persist OCS status (gitlab-org/gitlab#472827 - closed)
It introduces a new ocs-status
config map to record the scan status of each namespace during an OCS scan. It is only enabled when the persist_ocs_status
value is set to true in the agent config.
This ocs-status
config map is useful to complete Improve Reliability for Operational Container Scanning through integration tests, by enabling us to verify that an OCS scan has succeeded and generated an expected number of vulnerabilities.
Review Checklist
-
Be sure to consider the scalability and availability impact of this changes by evaluating the impact of them at scale.