Add secret discovery for pod.spec.containers.envFrom (#23)

Signed-off-by: Matthew DeVenny <[email protected]>
boxboat · Oct 20, 2021 · 62d44a3 · 62d44a3
1 parent fdc0b6a
commit 62d44a3
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/pkg/webhook/server.go b/pkg/webhook/server.go
@@ -405,6 +405,11 @@ func getSecretsSetFromPodSpec(podSpec corev1.PodSpec) []string {
 				secretSet[env.ValueFrom.SecretKeyRef.Name] = member
 			}
 		}
+		for _, envSource := range container.EnvFrom {
+			if envSource.SecretRef != nil {
+				secretSet[envSource.SecretRef.Name] = member
+			}
+		}
 	}
 
 	for _, volume := range podSpec.Volumes {