Rahul Shukla
Rahul Shukla
I am also interested in --exclude feature
I also have the same requirement where need to justify why I am putting that RULE in exception.
This is kind of blocker to use with aws eks and ecr.
It needs change here as well https://github.com/openclarity/kubeclarity/blob/main/runtime_scan/pkg/scanner/creds/ecr.go#L32 to exchange IRSA token.
on Aws enable IRSA https://docs.aws.amazon.com/emr/latest/EMR-on-EKS-DevelopmentGuide/setting-up-enable-IAM.html on Kubeclarity https://medium.com/@samuelbagattin/aws-iam-authentication-for-pods-in-eks-irsa-with-examples-5d8fa16aafba is closet example what needs to be done (igonre the mutating webhook part) User/(helm chart) need to create service account like this...
Any updates on this similar issue with aws opensearch as well
This is kind of blocker to use with aws eks and ecr.