fix: Skip CKV_K8S_10 and CKV_K8S_12 checks (#382)

FlowFuse · May 8, 2024 · df67cbc · df67cbc
2 parents 8a57034 + 01dd407
commit df67cbc
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 7 deletions.
diff --git a/helm/flowforge/templates/broker.yaml b/helm/flowforge/templates/broker.yaml
@@ -56,8 +56,10 @@ metadata:
     {{- toYaml . | nindent 4 }}
     {{- end }}
   annotations:
-    checkov.io/skip1: CKV_K8S_11=We do not force default resources constraints
-    checkov.io/skip2: CKV_K8S_13=We do not force default resources constraints
+    checkov.io/skip1: CKV_K8S_10=We do not force default resources constraints
+    checkov.io/skip2: CKV_K8S_11=We do not force default resources constraints
+    checkov.io/skip3: CKV_K8S_12=We do not force default resources constraints
+    checkov.io/skip4: CKV_K8S_13=We do not force default resources constraints
 spec:
   selector:
     matchLabels:

diff --git a/helm/flowforge/templates/deployment.yaml b/helm/flowforge/templates/deployment.yaml
@@ -9,10 +9,12 @@ metadata:
     {{- toYaml . | nindent 4 }}
     {{- end }}
   annotations:
-    checkov.io/skip1: CKV_K8S_38=The service account token is required to schedule projects
-    checkov.io/skip2: CKV_K8S_35=Current approach is a temporary one
-    checkov.io/skip3: CKV_K8S_11=We do not force default resources constraints
+    checkov.io/skip1: CKV_K8S_10=We do not force default resources constraints
+    checkov.io/skip2: CKV_K8S_11=We do not force default resources constraints
+    checkov.io/skip3: CKV_K8S_12=We do not force default resources constraints
     checkov.io/skip4: CKV_K8S_13=We do not force default resources constraints
+    checkov.io/skip5: CKV_K8S_38=The service account token is required to schedule projects
+    checkov.io/skip6: CKV_K8S_35=Current approach is a temporary one
 spec:
   replicas: {{ .Values.forge.replicas }}
   selector:

diff --git a/helm/flowforge/templates/file-storage.yml b/helm/flowforge/templates/file-storage.yml
@@ -24,9 +24,11 @@ metadata:
     {{- toYaml . | nindent 4 }}
     {{- end }}
   annotations:
-    checkov.io/skip1: CKV_K8S_35=Current approach is a temporary one
+    checkov.io/skip1: CKV_K8S_10=We do not force default resources constraints
     checkov.io/skip2: CKV_K8S_11=We do not force default resources constraints
-    checkov.io/skip3: CKV_K8S_13=We do not force default resources constraints 
+    checkov.io/skip3: CKV_K8S_12=We do not force default resources constraints
+    checkov.io/skip4: CKV_K8S_13=We do not force default resources constraints
+    checkov.io/skip5: CKV_K8S_35=Current approach is a temporary one
 spec:
   selector:
     matchLabels: