Add secret discovery for pod.spec.containers.envFrom

Signed-off-by: Matthew DeVenny <matt@boxboat.com>
boxboat · Oct 20, 2021 · fe98b01 · fe98b01
1 parent fdc0b6a
commit fe98b01
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/pkg/webhook/server.go b/pkg/webhook/server.go
@@ -405,6 +405,11 @@ func getSecretsSetFromPodSpec(podSpec corev1.PodSpec) []string {
 				secretSet[env.ValueFrom.SecretKeyRef.Name] = member
 			}
 		}
+		for _, envSource := range container.EnvFrom {
+			if envSource.SecretRef != nil {
+				secretSet[envSource.SecretRef.Name] = member
+			}
+		}
 	}
 
 	for _, volume := range podSpec.Volumes {