feat: Support PodServiceAccount relationship

Signed-off-by: Justin Toh <tohjustin@hotmail.com>
tohjustin · Oct 16, 2021 · 6f6e0ab · 6f6e0ab
1 parent c707036
commit 6f6e0ab
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/internal/graph/kubernetes.go b/internal/graph/kubernetes.go
@@ -63,6 +63,7 @@ const (
 	RelationshipPodPriorityClass         Relationship = "PodPriorityClass"
 	RelationshipPodRuntimeClass          Relationship = "PodRuntimeClass"
 	RelationshipPodSecurityPolicy        Relationship = "PodSecurityPolicy"
+	RelationshipPodServiceAccount        Relationship = "PodServiceAccount"
 	RelationshipPodVolume                Relationship = "PodVolume"
 	RelationshipPodVolumeCSIDriver       Relationship = "PodVolumeCSIDriver"
 	RelationshipPodVolumeCSIDriverSecret Relationship = "PodVolumeCSIDriverSecret" //nolint:gosec
@@ -528,6 +529,12 @@ func getPodRelationships(n *Node) (*RelationshipMap, error) {
 		result.AddDependencyByKey(ref.Key(), RelationshipPodSecurityPolicy)
 	}
 
+	// RelationshipPodServiceAccount
+	if sa := pod.Spec.ServiceAccountName; len(sa) != 0 {
+		ref = ObjectReference{Kind: "ServiceAccount", Name: sa, Namespace: ns}
+		result.AddDependencyByKey(ref.Key(), RelationshipPodServiceAccount)
+	}
+
 	// RelationshipPodVolume
 	// RelationshipPodVolumeCSIDriver
 	// RelationshipPodVolumeCSIDriverSecret