search

yonahd / kor

A Golang Tool to discover unused Kubernetes Resources
MIT License
1.04k stars 96 forks source link

Scan Traefik IngressRoute resources for references to secrets #232

Closed lol768 closed 7 months ago

lol768 commented 7 months ago

Consider looking at kind: IngressRoute CRDs which specify, within their spec:

tls:
  secretName: NameOfSecret

In order to consider a secret used (or at the very least, document the fact that there are potential false positives when Traefik's non-standard IngressRoutes are in use)

yonahd commented 7 months ago

Hi @lol768 Thanks for the feedback!

This is a known issue and we'll make it clearer in this chart https://github.com/yonahd/kor?tab=readme-ov-file#supported-resources-and-limitations that we don't support resources reffered in CRDs(there are simply too many) .

Let us know if you come across anything else