generated from cloudposse-terraform-components/template
-
-
Notifications
You must be signed in to change notification settings - Fork 0
Open
Labels
bugπ An issue with the systemπ An issue with the system
Description
Found a bug? Maybe our Slack Community can help.
Describe the Bug
The upstream echo-server helm chart has a ServiceAccount helper, resource, and declaration on the container/pod, but the CP component chart only has the helper and is missing the others ie.
- https://github.com/Ealenn/charts/blob/master/charts/echo-server/templates/_helpers.tpl#L50
- https://github.com/Ealenn/charts/blob/master/charts/echo-server/templates/serviceaccount.yaml
- https://github.com/Ealenn/charts/blob/master/charts/echo-server/templates/deployment.yaml#L25
This is getting flagged in security scans (ie. Sonar) because the service account permissions cannot be restricted:
https://next.sonarqube.com/sonarqube/coding_rules?open=kubernetes%3AS6865&rule_key=kubernetes%3AS6865
Expected Behavior
ServiceAccount resources and configuration from upstream chart are included in CP component so that service account permissions can be configured to remediate possible security issue
Metadata
Metadata
Assignees
Labels
bugπ An issue with the systemπ An issue with the system