As we reach the end of September 2024, ThreadFix version 3.x on-premises has officially reached its End-of-Life. Therefore, there is no longer support or updates for this version of the product. We have fully transitioned our product and development teams to focus ThreadFix SaaS and migrating all customers over from the on-premises versions. Our Customer Success and Support teams are here to help you in migrating to ThreadFix SaaS and maximizing the value you see from this improved offering from Coalfire. This is the next phase of ThreadFix and our team is looking forward to continuing to support you on this journey.
Updating 3.X ThreadFix License
You will learn
How to change a ThreadFix license with Kubernetes.
Prerequisites
Audience: IT Professional
Difficulty: Intermediate
Time needed: Approximately 10 minutes
Tools required: See Pre-requisites list below
Pre-requisites list:
ThreadFix instance running in Kubernetes
kubectl access to Kubernetes cluster
Helm version greater than 3.2
Enter the following commands on a command line to perform the described action.
There are two ways to apply a license to ThreadFix running in Kubernetes, through a Kubernetes secret or a Helm value. Follow the appropriate section for the current installation method. If unsure of which method is currently being used, run the following command.
helm get values $(helm ls | grep threadfix | awk '{print $1}') | grep -E '^"?threadfix\.license' >> /dev/null && echo 'Helm Value' || echo 'Kubernetes Secret'
Kubernetes Secret
Follow this section if managing a ThreadFix license with a manually created Kubernetes Secret.
Copy the new ThreadFix license to the current working directory with the name
threadfix.license
.Get the current ThreadFix license secret name.
TF_LICENSE_SECRET=$(kubectl get deploy -l app.kubernetes.io/name=auth,app.kubernetes.io/part-of=threadfix -o jsonpath='{ .items[].spec.template.spec.volumes[?(@.name=="tf-license")].secret.secretName }')
Backup the current ThreadFix license.
kubectl get secret $TF_LICENSE_SECRET -o go-template='{{ index .data "threadfix.license" }}' | base64 -d > threadfix.license.bak
Remove the current license from the Kubernetes cluster.
Create a new license secret.
Restart all ThreadFix containers.
Helm Value
Use this method if managing the ThreadFix license from the user’s values file.
Get the Helm release name for the ThreadFix instance.
Get the current installed version of ThreadFix.
Export the currently installed Helm values.
Backup values to a separate file.
Add the new license to currentValues.yaml by performing the following:
Open the currentValues.yaml file with a text editor.
Navigate to the item named "threadfix.license".
Replace the lines after "threadfix.license" with the content of the new ThreadFix license.
Indentation is important for this file to render correctly. Ensure that the new content adheres to the same indentation as the previous item.
Save this file.
Update the ThreadFix Helm installation.
If not using 'denimgroup/threadfix' as the chart name, this value must be changed to the location of the ThreadFix chart. Use helm search repo threadfix to find the correct chart name.
If the new license does not apply after a few minutes, restart ThreadFix deployments.
Table of Contents
www.threadfix.it | www.coalfire.com
Copyright © 2024 Coalfire. All rights reserved.
This Information Security Policy is CoalFire - Public: Distribution of this material is not limited.