Hi everyone!
Been working with ZAP via automation framework for some time, but now I need to deploy a standalone instance in k8s. So I read some about daemon mode and decided to use it but restrict access with only API left in deployment. After preparing chart and deploying it on my laptop (with unrestricted internet access) I tried to repeat same actions in my company's intranet and faced a problem: zap in daemon mode is trying to check add-on updates and so on and as it fails, the pod dies.
I found some discussions like
but ain't completely clear for me whether -silent is only acceptable for baseline and full scan or what. Maybe there's another useful option, but you haven't placed it in docs yet. Help me please, tell if there are any options to launch zap in k8s in intranet in daemon mod (as API). Currently using zaproxy/zap-stable:2.16.1