mirror of
https://github.com/semantica-agi/semantica.git
synced 2026-08-29 04:26:20 +00:00
KaifAhmad1
ed44260ec3
Checkov's helm framework renders the chart without a namespace override, so metadata.namespace (set to .Release.Namespace, bound only at install time) always resolves to "default" and trips CKV_K8S_21 on service.yaml, deployment.yaml, and configmap.yaml even though the chart is namespace-agnostic by design. Suppressed via per-file checkov:skip comments, following the same convention already used for the Cloud Run false positives in deploy/gcp/cloudrun-service.yaml.
13 lines
588 B
YAML
13 lines
588 B
YAML
# checkov:skip=CKV_K8S_21:namespace is set to .Release.Namespace below, supplied at install time via `helm install -n <namespace>`; Checkov's helm-chart renderer runs without a namespace override and always resolves this to "default", which is a scanner artifact, not the deployed value
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: {{ include "knowledge-explorer.fullname" . }}
|
|
namespace: {{ .Release.Namespace }}
|
|
labels:
|
|
{{- include "knowledge-explorer.labels" . | nindent 4 }}
|
|
data:
|
|
{{- range $key, $value := .Values.env }}
|
|
{{ $key }}: {{ $value | quote }}
|
|
{{- end }}
|