search

undistro / zora

Zora is an open source solution that helps you achieve compliance with Kubernetes best practices recommended by industry-leading frameworks. By scanning your cluster with multiple plugins, Zora identifies potential issues, misconfigurations, and vulnerabilities.
https://getup.io/opensource/zora-oss
Apache License 2.0
280 stars 24 forks source link

Add flag `skipInternalResources` in Helm chart #189

Closed matheusfm closed 1 year ago

matheusfm commented 1 year ago

Description

Add flag scan.plugins.popeye.skipInternalResources in helm chart. This flag specifies whether the following resources should be skipped by popeye scans.

  1. resources from kube-system, kube-public and kube-node-lease namespaces;
  2. kubernetes system reserved RBAC (prefixed with system:);
  3. kube-root-ca.crt configmaps;
  4. default namespace;
  5. default serviceaccounts;
  6. Helm secrets (prefixed with sh.helm.release);
  7. Zora components.

How has this been tested?

Checklist