clair is allways showing resut OK

[AllardKrings]

Hello,

i am strugling now for days with configuring CLAIR. I can call clair from the CLi clairctl and from QUAY when pushing an image. C:LAIR allways rsponds with ok and does not report any vulnerabilities.

It must have something to do with my configuration:
I run on a microk8s-cluster on ubutu 22.04 on amd

My config.yaml:

http_listen_addr: :8081
introspection_addr: :8088
log_level: debug
indexer:
� �connstring: host=postgres13.postgres.svc.cluster.local port=5432 dbname=clair user>
�� scanlock_retry: 10
�� layer_scan_concurrency: 5
�� migrations: true
matcher:
��indexer_addr: :8081
�� connstring: host=postgres13.postgres.svc.cluster.local port=5432 dbname=clair user>
�� max_conn_pool: 100
�� migrations: true
updaters:
�� sets:

• "alpine"
• "debian"
• "ubuntu"
  matchers:
  names:
• "alpine"
• "debian"
• "ubuntu"
  ��config: {}
  notifier:
  �� indexer_addr: :8081
  �� matcher_addr: :8081
  �� connstring: host=postgres13.postgres.svc.cluster.local port=5432 dbname=clair user>
  �� migrations: true
  �� delivery_interval: 10m
  �� poll_interval: 60m

This is my yaml:

apiVersion: apps/v1
kind: Deployment
metadata:
name: clair
namespace: quay
spec:
replicas: 1
selector:
matchLabels:
app: clair
template:
metadata:
labels:
app: clair
spec:
containers:
- image: quay.io/projectquay/clair:4.7.2
name: clairv4
ports:
- containerPort: 8081
name: endpoint
protocol: TCP
- containerPort: 8088
name: health
protocol: TCP
env:
- name: CLAIR_CONF
value: /clair/config.yaml
- name: CLAIR_MODE
value: combo
volumeMounts:
- mountPath: /clair/
name: clair
nodeSelector:
kubernetes.io/arch: amd64
volumes:
- name: clair
persistentVolumeClaim:
claimName: clair-pvc

apiVersion: v1
kind: Service
metadata:
name: clair
namespace: quay
spec:
ports:

• name: endpoint
  port: 8081
  nodePort: 30081
  protocol: TCP
  targetPort: 8081
• name: health
  port: 8088
  nodePort: 30088
  protocol: TCP
  targetPort: 8088
  selector:
  app: clair
  type: NodePort
  status:
  loadBalancer: {}

---

apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: clair-pvc
namespace: quay
spec:
accessModes:

• ReadWriteMany
  resources:
  requests:
  storage: 1Gi
  storageClassName: ""
  volumeMode: Filesystem
  volumeName: clair-pv

---

apiVersion: v1
kind: PersistentVolume
metadata:
name: clair-pv
spec:
accessModes:

• ReadWriteMany
  capacity:
  storage: 1Gi
  mountOptions:
• hard
• nfsvers=4.1
  nfs:
  path: /mnt/nfs_share/clair
  server: 192.168.2.110
  persistentVolumeReclaimPolicy: Retain
  volumeMode: Filesystem

Anybody any sugfgestions?

[nfb]

This project doesn't have compatibility with clair 4 and will throw errors when pointed at clair 4.7.2 as you have done in your deployment.
It sounds like you're having issues with clairctl which is maintained in https://github.com/quay/clair