apiVersion: "helm-expt.confighub.com/v1alpha1" kind: "ScanReceipt" metadata: name: "traefik-default-r001" spec: variantRevision: "../variant-revision.yaml" renderedObjectSetSHA256: "8e17fdeb313402d3b8cc3f7827c1f35d278e6809cf93ea0d7a9be31ea82c464b" result: "warn" scanner: name: "helm-expt-local-rendered-object-scan" version: "0.1.0" policyBundleDigest: "743f6ce209a0e83d5ed628ed507a02c74b97ccb48779cf65c261c743d20c5331" findingCounts: critical: 0 high: 0 medium: 29 low: 0 info: 0 findings: - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRole||traefik-traefik" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRole||traefik-traefik" message: "Cluster-scoped RBAC requires production review" - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRole||traefik-traefik" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRole||traefik-traefik" message: "Cluster-scoped RBAC requires production review" - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRoleBinding||traefik-traefik" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRoleBinding||traefik-traefik" message: "Cluster-scoped RBAC requires production review" - id: "cluster-rbac-review:rbac.authorization.k8s.io/v1|ClusterRoleBinding||traefik-traefik" rule: "cluster-rbac-review" severity: "medium" object: "rbac.authorization.k8s.io/v1|ClusterRoleBinding||traefik-traefik" message: "Cluster-scoped RBAC requires production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||accesscontrolpolicies.hub.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||accesscontrolpolicies.hub.traefik.io" message: "CRD ownership and upgrade behavior require production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||aiservices.hub.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||aiservices.hub.traefik.io" message: "CRD ownership and upgrade behavior require production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||apiauths.hub.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||apiauths.hub.traefik.io" message: "CRD ownership and upgrade behavior require production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||apibundles.hub.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||apibundles.hub.traefik.io" message: "CRD ownership and upgrade behavior require production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||apicatalogitems.hub.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||apicatalogitems.hub.traefik.io" message: "CRD ownership and upgrade behavior require production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||apiplans.hub.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||apiplans.hub.traefik.io" message: "CRD ownership and upgrade behavior require production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||apiportalauths.hub.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||apiportalauths.hub.traefik.io" message: "CRD ownership and upgrade behavior require production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||apiportals.hub.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||apiportals.hub.traefik.io" message: "CRD ownership and upgrade behavior require production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||apiratelimits.hub.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||apiratelimits.hub.traefik.io" message: "CRD ownership and upgrade behavior require production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||apis.hub.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||apis.hub.traefik.io" message: "CRD ownership and upgrade behavior require production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||apiversions.hub.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||apiversions.hub.traefik.io" message: "CRD ownership and upgrade behavior require production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||contentitems.hub.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||contentitems.hub.traefik.io" message: "CRD ownership and upgrade behavior require production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||ingressroutes.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||ingressroutes.traefik.io" message: "CRD ownership and upgrade behavior require production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||ingressroutetcps.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||ingressroutetcps.traefik.io" message: "CRD ownership and upgrade behavior require production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||ingressrouteudps.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||ingressrouteudps.traefik.io" message: "CRD ownership and upgrade behavior require production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||managedapplications.hub.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||managedapplications.hub.traefik.io" message: "CRD ownership and upgrade behavior require production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||managedsubscriptions.hub.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||managedsubscriptions.hub.traefik.io" message: "CRD ownership and upgrade behavior require production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||middlewares.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||middlewares.traefik.io" message: "CRD ownership and upgrade behavior require production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||middlewaretcps.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||middlewaretcps.traefik.io" message: "CRD ownership and upgrade behavior require production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||serverstransports.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||serverstransports.traefik.io" message: "CRD ownership and upgrade behavior require production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||serverstransporttcps.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||serverstransporttcps.traefik.io" message: "CRD ownership and upgrade behavior require production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||tlsoptions.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||tlsoptions.traefik.io" message: "CRD ownership and upgrade behavior require production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||tlsstores.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||tlsstores.traefik.io" message: "CRD ownership and upgrade behavior require production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||traefikservices.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||traefikservices.traefik.io" message: "CRD ownership and upgrade behavior require production review" - id: "crd-upgrade-policy:apiextensions.k8s.io/v1|CustomResourceDefinition||uplinks.hub.traefik.io" rule: "crd-upgrade-policy" severity: "medium" object: "apiextensions.k8s.io/v1|CustomResourceDefinition||uplinks.hub.traefik.io" message: "CRD ownership and upgrade behavior require production review"