You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Oct 30, 2024. It is now read-only.
We observe that naming with 3 dash (---) or plus for the configuration name in the yaml file, it generates error.
In example ---RELEASE_NAME---
configurationName: acme-sys-function---RELEASE-NAME---12-34-56
Error:
[error] AutomountServiceAccountTokenTrueAndDefaultSA
Message: Default service account with token mounted. automountServiceAccountToken should be set to 'false' on either the ServiceAccount or on the PodSpec or a non-default service account should be used.
If name with 2 dash "--"
configurationName: acme-sys-function--RELEASE-NAME--12-34-56
No Error is generated.
$ kubeaudit all -f ./test_manifest.yaml_2_dash
[WARNING]: kubernetes.io for override labels will soon be deprecated. Please, update them to use kubeaudit.io instead.
All checks completed. 0 high-risk vulnerabilities found
If name with 1 dash "-"
configurationName: acme-sys-function-RELEASE-NAME-12-34-56
No Error is generated.
$ kubeaudit all -f ./test_manifest.yaml_1_dash
[WARNING]: kubernetes.io for override labels will soon be deprecated. Please, update them to use kubeaudit.io instead.
All checks completed. 0 high-risk vulnerabilities found
We shouldn't have limitation when refer to a configuration file.
Please advice, if there is an error in the functionality of Kubeaudit.
ENVIRONMENT
Kubeaudit version: 0.22.1
STEPS TO REPRODUCE
Edit or vi test_manifest.yaml
Add the following contents:
-- [error] AutomountServiceAccountTokenTrueAndDefaultSA
Message: Default service account with token mounted. automountServiceAccountToken should be set to 'false' on either the ServiceAccount or on the PodSpecor a non-default service account should be used.
Edit and change this line as follow with 2 dash
configurationName: acme-sys-function--RELEASE-NAME--12-34-56
Test
kubeaudit all -f ./test_manifest.yaml
Expected Result:
All checks completed. 0 high-risk vulnerabilities found
The text was updated successfully, but these errors were encountered:
ISSUE TYPE
In example ---RELEASE_NAME---
configurationName: acme-sys-function---RELEASE-NAME---12-34-56
Error:
[error] AutomountServiceAccountTokenTrueAndDefaultSA
Message: Default service account with token mounted. automountServiceAccountToken should be set to 'false' on either the ServiceAccount or on the PodSpec or a non-default service account should be used.
configurationName: acme-sys-function--RELEASE-NAME--12-34-56
No Error is generated.
$ kubeaudit all -f ./test_manifest.yaml_2_dash
[WARNING]: kubernetes.io for override labels will soon be deprecated. Please, update them to use kubeaudit.io instead.
All checks completed. 0 high-risk vulnerabilities found
configurationName: acme-sys-function-RELEASE-NAME-12-34-56
No Error is generated.
$ kubeaudit all -f ./test_manifest.yaml_1_dash
[WARNING]: kubernetes.io for override labels will soon be deprecated. Please, update them to use kubeaudit.io instead.
All checks completed. 0 high-risk vulnerabilities found
We shouldn't have limitation when refer to a configuration file.
Please advice, if there is an error in the functionality of Kubeaudit.
ENVIRONMENT
STEPS TO REPRODUCE
Add the following contents:
---
# Source: acms-test/templates/deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
name: acms-test-1
labels:
traf_enable: active
annotations:
configurationName: acme-sys-function---RELEASE-NAME---12-34-56
spec:
replicas: 1
strategy:
type: RollingUpdate
rollingUpdate:
maxSurge: 0
selector:
matchLabels:
app.kubernetes.io/name: acms-test
template:
metadata:
labels:
acms-test/pod-type: sys-test
annotations:
adapt.acme.com/serviceconf_port: "8000"
acme.com/service-id: "acme-sys-function---RELEASE-NAME---12-34-56"
Save and test
kubeaudit all -f ./test_manifest.yaml
Expected Result:
---------------- Results for ---------------
apiVersion: apps/v1
kind: Deployment
metadata:
name: acms-test-1
-- [error] AutomountServiceAccountTokenTrueAndDefaultSA
Message: Default service account with token mounted. automountServiceAccountToken should be set to 'false' on either the ServiceAccount or on the PodSpecor a non-default service account should be used.
Edit and change this line as follow with 2 dash
configurationName: acme-sys-function--RELEASE-NAME--12-34-56
Test
kubeaudit all -f ./test_manifest.yaml
Expected Result:
All checks completed. 0 high-risk vulnerabilities found
The text was updated successfully, but these errors were encountered: