Enable Project Support for Live Assessment on Self-Hosted Deployments

Project support scopes Runtime Live Assessment to JFrog Projects so users see only the runtime data their project permissions allow. On self-hosted deployments, project filtering is disabled by default. Enable it when you want Live Assessment to honor project-level Role-Based Access Control (RBAC).

For background on how Runtime applies project permissions, see Features and Capabilities.

Prerequisite: Your JFrog Platform self-hosted deployment is version 1.14 or later.

Choose one of the following methods:

• Enable Project Support with a Helm Command
• Enable Project Support in a Values File
• Enable Project Support with an Environment Variable

Enable Project Support with a Helm Command

Use a Helm --set flag when you install or upgrade Runtime and want to enable project filtering without editing a values file.

To enable project support with a Helm command:

• Run the following Helm install or upgrade command with the project filtering flag set to false:

  helm upgrade --install <release-name> <chart-path> \
    --set runtime.disableProjectFiltering=false

  Where:

  • <release-name>: The Helm release name for Runtime
  • <chart-path>: The path or chart reference for the Runtime Helm chart

  For example:

  helm upgrade --install jf-runtime ./charts \
    --set runtime.disableProjectFiltering=false

  Helm applies the value and Runtime enables project filtering for Live Assessment.

Enable Project Support in a Values File

Use a values file when you manage Runtime configuration in version control or shared Helm values.

To enable project support in a values file:

1. In your Runtime Helm values file, set runtime.disableProjectFiltering to false:

   runtime:
     disableProjectFiltering: false

2. Apply the updated values with a Helm upgrade:

   helm upgrade <release-name> <chart-path> -f <values-file>

   Where:

   • <release-name>: The Helm release name for Runtime
   • <chart-path>: The path or chart reference for the Runtime Helm chart
   • <values-file>: The path to your values file

   For example:

   helm upgrade jf-runtime ./charts -f values.yaml

   Helm upgrades the release and Runtime enables project filtering for Live Assessment.

Enable Project Support with an Environment Variable

Use the environment variable when you configure the Runtime service deployment directly instead of through Helm values.

To enable project support with an environment variable:

• Set the following environment variable on the Runtime service:

  - name: JF_RUNTIMEAUDIT_DISABLEPROJECTFILTERING
    value: "false"

  The Runtime service reads the variable and enables project filtering for Live Assessment.

After you enable project support, open Runtime > Live Assessment and confirm that project scoping is available for your users. For how to inspect images, workloads, and processes in Live Assessment, see Inspecting Live Software Components.