for configmap kubesec is not working

[jainpratik163]

Describe the bug
i am running kubesec for helm chart and in that chart we have configmap and for this kubesec is not working
and getting below message

{
"object": "ConfigMap/rt-generic-element-couchbase-configmap.default",
"valid": true,
"fileName": "STDIN",
"message": "This resource kind is not supported by kubesec",
"score": 0,
"scoring": {}
},

Expected behaviour
kubesec should work

[06kellyjac]

#287

[jainpratik163]

does configmap is supportable or not?

[06kellyjac]

kubesec does not review configmaps for security since there isn't really anything to do there, you can just filter it out of the results or not feed it to kubesec in the first place

[jainpratik163]

our helm chart contains all so is there any way we can provide filters in this command helm template <helmchartname>.tgz | kubesec scan -

[06kellyjac]

easiest would be to filter the output of kubesec with jq or process with opa/conftest

but if you want to do the filter ahead you can do:

helm template XYZ | yq 'select(.kind == "Deployment" or .kind == "DaemonSet" or .kind == "Pod")' -y | kubesec scan -

change the kind's as you'd like

that filters relevant resources using yq (-y converts it back to yaml)

https://kislyuk.github.io/yq/