apiVersion: "helm-expt.confighub.com/v1alpha1" kind: "ScanReceipt" metadata: name: "autoscaler-vertical-pod-autoscaler-0-9-0-default-r001" labels: confighub.io/chart-ref: "autoscaler/vertical-pod-autoscaler" confighub.io/chart-version: "0.9.0" confighub.io/proof-tier: "next80-full" confighub.io/variant: "default" spec: variantRevision: "../variant-revision.yaml" renderedObjectSetSHA256: "9d7307f629bdc478fa0c9bc6646359976b96d0cfd549bd66c13442facfa57490" result: "warn" scanner: name: "helm-expt-local-rendered-object-scan" version: "0.2.0" policyBundleDigest: "d4913c44f60cee40b376761c82c0c5b84e3f65043012ae875d8f376330dabc35" findingCounts: critical: 0 high: 0 medium: 25 low: 0 info: 0 findings: - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRole||vertical-pod-autoscaler-admission-controller" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRole||vertical-pod-autoscaler-admission-controller" message: "Cluster-scoped RBAC requires production review" - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRole||vertical-pod-autoscaler-recommender-actor" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRole||vertical-pod-autoscaler-recommender-actor" message: "Cluster-scoped RBAC requires production review" - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRole||vertical-pod-autoscaler-recommender-checkpoint-actor" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRole||vertical-pod-autoscaler-recommender-checkpoint-actor" message: "Cluster-scoped RBAC requires production review" - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRole||vertical-pod-autoscaler-recommender-metrics-reader" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRole||vertical-pod-autoscaler-recommender-metrics-reader" message: "Cluster-scoped RBAC requires production review" - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRole||vertical-pod-autoscaler-recommender-status-actor" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRole||vertical-pod-autoscaler-recommender-status-actor" message: "Cluster-scoped RBAC requires production review" - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRole||vertical-pod-autoscaler-recommender-target-reader" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRole||vertical-pod-autoscaler-recommender-target-reader" message: "Cluster-scoped RBAC requires production review" - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRole||vertical-pod-autoscaler-updater-actor" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRole||vertical-pod-autoscaler-updater-actor" message: "Cluster-scoped RBAC requires production review" - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRole||vertical-pod-autoscaler-updater-evictioner" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRole||vertical-pod-autoscaler-updater-evictioner" message: "Cluster-scoped RBAC requires production review" - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRole||vertical-pod-autoscaler-updater-in-place" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRole||vertical-pod-autoscaler-updater-in-place" message: "Cluster-scoped RBAC requires production review" - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRole||vertical-pod-autoscaler-updater-status-reader" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRole||vertical-pod-autoscaler-updater-status-reader" message: "Cluster-scoped RBAC requires production review" - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRole||vertical-pod-autoscaler-updater-target-reader" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRole||vertical-pod-autoscaler-updater-target-reader" message: "Cluster-scoped RBAC requires production review" - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRoleBinding||vertical-pod-autoscaler-admission-controller" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRoleBinding||vertical-pod-autoscaler-admission-controller" message: "Cluster-scoped RBAC requires production review" - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRoleBinding||vertical-pod-autoscaler-recommender-actor" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRoleBinding||vertical-pod-autoscaler-recommender-actor" message: "Cluster-scoped RBAC requires production review" - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRoleBinding||vertical-pod-autoscaler-recommender-checkpoint-actor" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRoleBinding||vertical-pod-autoscaler-recommender-checkpoint-actor" message: "Cluster-scoped RBAC requires production review" - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRoleBinding||vertical-pod-autoscaler-recommender-metrics-reader" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRoleBinding||vertical-pod-autoscaler-recommender-metrics-reader" message: "Cluster-scoped RBAC requires production review" - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRoleBinding||vertical-pod-autoscaler-recommender-status-actor" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRoleBinding||vertical-pod-autoscaler-recommender-status-actor" message: "Cluster-scoped RBAC requires production review" - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRoleBinding||vertical-pod-autoscaler-recommender-target-reader" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRoleBinding||vertical-pod-autoscaler-recommender-target-reader" message: "Cluster-scoped RBAC requires production review" - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRoleBinding||vertical-pod-autoscaler-updater-actor-binding" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRoleBinding||vertical-pod-autoscaler-updater-actor-binding" message: "Cluster-scoped RBAC requires production review" - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRoleBinding||vertical-pod-autoscaler-updater-evictioner-binding" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRoleBinding||vertical-pod-autoscaler-updater-evictioner-binding" message: "Cluster-scoped RBAC requires production review" - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRoleBinding||vertical-pod-autoscaler-updater-in-place-binding" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRoleBinding||vertical-pod-autoscaler-updater-in-place-binding" message: "Cluster-scoped RBAC requires production review" - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRoleBinding||vertical-pod-autoscaler-updater-status-reader-binding" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRoleBinding||vertical-pod-autoscaler-updater-status-reader-binding" message: "Cluster-scoped RBAC requires production review" - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRoleBinding||vertical-pod-autoscaler-updater-target-reader-binding" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRoleBinding||vertical-pod-autoscaler-updater-target-reader-binding" message: "Cluster-scoped RBAC requires production review" - id: "crd-lifecycle-review:apiextensions.k8s.io/v1|CustomResourceDefinition||verticalpodautoscalercheckpoints.autoscaling.k8s.io" rule: "crd-lifecycle-review" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||verticalpodautoscalercheckpoints.autoscaling.k8s.io" message: "CRD lifecycle and upgrade behavior require review" - id: "crd-lifecycle-review:apiextensions.k8s.io/v1|CustomResourceDefinition||verticalpodautoscalers.autoscaling.k8s.io" rule: "crd-lifecycle-review" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||verticalpodautoscalers.autoscaling.k8s.io" message: "CRD lifecycle and upgrade behavior require review" - id: "webhook-readiness-review:admissionregistration.k8s.io/v1|MutatingWebhookConfiguration||vertical-pod-autoscaler-webhook-config" rule: "webhook-readiness-review" severity: "medium" object: "admissionregistration.k8s.io/v1|MutatingWebhookConfiguration||vertical-pod-autoscaler-webhook-config" message: "Webhook certificate and readiness behavior require observation after apply"