update iop-vmaas-reposcan to use vex data

Author: pfreyburg

src/roles/iop_vmaas/defaults/main.yaml

@@ -1,6 +1,6 @@
 ---
-iop_vmaas_container_image: "quay.io/iop/vmaas"
-iop_vmaas_container_tag: "foreman-3.18"
+iop_vmaas_container_image: "quay.io/redhat-services-prod/insights-management-tenant/insights-vulnerability/vmaas"
+iop_vmaas_container_tag: "latest"
 
 iop_vmaas_database_name: vmaas_db
 iop_vmaas_database_user: vmaas_admin

src/roles/iop_vmaas/tasks/main.yaml

@@ -49,11 +49,13 @@
       SYNC_REPOS: "yes"
       SYNC_CVE_MAP: "yes"
       SYNC_CPE: "no"
-      SYNC_CSAF: "no"
+      SYNC_CSAF: "yes"
       SYNC_RELEASES: "no"
       SYNC_RELEASE_GRAPH: "no"
       KATELLO_URL: "http://iop-core-gateway:9090"
       REDHAT_CVEMAP_URL: "http://iop-core-gateway:9090/pub/iop/data/meta/v1/cvemap.xml"
+      CSAF_VEX_BASE_URL: "http://iop-core-gateway:9090/pub/iop/data/csaf/v2/vex/"
+      CSAF_VEX_INDEX_CSV_ENABLED: "no"
       POSTGRESQL_SSL_MODE: "disable"
     secrets:
       - "iop-service-vmaas-reposcan-client-ca-cert,target=/katello-server-ca.crt,mode=0440,type=mount"