k8s NS scanning based on labels

[dsever]

Description

At the moment when doing k8s scanning, to include or exclude namespaces from the scanning for kbom we need to specify statically additional NS names (e.g kube-system, ingress).

 --include-namespaces strings        indicate the namespaces included in scanning (example: kube-system)
--exclude-namespaces strings        indicate the namespaces excluded from scanning (example: kube-system)

It would be beneficial to have it more dynamic by using labels like for the NS admin to specify label e.g k8s-scan: true and then pass it to cli, in the same way how is supported for nodes

 --exclude-nodes strings             indicate the node labels that the node-collector job should exclude from scanning (example: kubernetes.io/arch:arm64,team:dev)

BR D

Target

Kubernetes

Scanner

None

[afdesk]

@dsever thanks for the suggestion.
It's interesting.
let's take a look at the feedback from the community )