fix: wrap checkov:skip comment to respect yamllint's 120-char line-length limit

The single-line checkov:skip=CKV_K8S_21 comment added in ed44260 was 286
characters, exceeding the repo's yamllint line-length rule (max 120,
.pre-commit-config.yaml). Split into three short comment lines: the skip
directive itself, then the rationale, in service.yaml, deployment.yaml,
and configmap.yaml.
This commit is contained in:
KaifAhmad1
2026-07-25 16:59:26 +05:30
parent ed44260ec3
commit 8beca57238
3 changed files with 9 additions and 3 deletions
@@ -1,4 +1,6 @@
# checkov:skip=CKV_K8S_21:namespace is set to .Release.Namespace below, supplied at install time via `helm install -n <namespace>`; Checkov's helm-chart renderer runs without a namespace override and always resolves this to "default", which is a scanner artifact, not the deployed value
# checkov:skip=CKV_K8S_21: namespace is set via .Release.Namespace, bound only at helm install/template time
# Checkov's helm renderer runs without a namespace override, so this always resolves to "default" here —
# a scanner artifact, not the deployed value; see .checkov.yaml
apiVersion: v1
kind: ConfigMap
metadata:
@@ -1,4 +1,6 @@
# checkov:skip=CKV_K8S_21:namespace is set to .Release.Namespace below, supplied at install time via `helm install -n <namespace>`; Checkov's helm-chart renderer runs without a namespace override and always resolves this to "default", which is a scanner artifact, not the deployed value
# checkov:skip=CKV_K8S_21: namespace is set via .Release.Namespace, bound only at helm install/template time
# Checkov's helm renderer runs without a namespace override, so this always resolves to "default" here —
# a scanner artifact, not the deployed value; see .checkov.yaml
apiVersion: apps/v1
kind: Deployment
metadata:
@@ -1,4 +1,6 @@
# checkov:skip=CKV_K8S_21:namespace is set to .Release.Namespace below, supplied at install time via `helm install -n <namespace>`; Checkov's helm-chart renderer runs without a namespace override and always resolves this to "default", which is a scanner artifact, not the deployed value
# checkov:skip=CKV_K8S_21: namespace is set via .Release.Namespace, bound only at helm install/template time
# Checkov's helm renderer runs without a namespace override, so this always resolves to "default" here —
# a scanner artifact, not the deployed value; see .checkov.yaml
apiVersion: v1
kind: Service
metadata: