Configuration reference

Use the following tables to configure vulnerability reporting fields and environment variable overrides for Red Hat Edge Manager.

The following table describes fields under the vulnerabilityReporting key in Helm values or /etc/flightctl/service-config.yaml.

Field Type Default Description

enabled

boolean

false

Enables vulnerability sync and API endpoints.

syncInterval

duration

15m

Interval between Red Hat Trusted Profile Analyzer sync runs. Use Go duration syntax (for example, 15m, 1h).

trustify.endpoint

string

Not set

Red Hat Trusted Profile Analyzer API base URL. Required when enabled is true.

trustify.auth.mode

string

none

Authentication mode: none or client-credentials.

trustify.auth.oidcIssuerUrl

string

Not set

OIDC issuer URL when mode is client-credentials.

trustify.auth.clientId

string

Not set

OAuth2 client ID for Podman deployments.

trustify.auth.clientSecret

string

Not set

OAuth2 client secret for Podman deployments.

trustify.auth.secretName

string

Not set

Kubernetes secret name with client_id and client_secret keys for Helm deployments.

You can override any value with environment variables on flightctl-periodic and flightctl-api:

Environment variable Description

FLIGHTCTL_VULNERABILITY_REPORTING_ENABLED

true, 1, false, or 0

FLIGHTCTL_VULNERABILITY_REPORTING_SYNC_INTERVAL

Sync interval (for example, 15m)

FLIGHTCTL_VULNERABILITY_REPORTING_TRUSTIFY_ENDPOINT

Red Hat Trusted Profile Analyzer API base URL

FLIGHTCTL_VULNERABILITY_REPORTING_TRUSTIFY_AUTH_MODE

none or client-credentials

FLIGHTCTL_VULNERABILITY_REPORTING_TRUSTIFY_OIDC_ISSUER_URL

OIDC issuer URL

FLIGHTCTL_VULNERABILITY_REPORTING_TRUSTIFY_CLIENT_ID

OAuth2 client ID

FLIGHTCTL_VULNERABILITY_REPORTING_TRUSTIFY_CLIENT_SECRET

OAuth2 client secret

Environment variables take precedence over the configuration file.