ignore forbidden resources

Signed-off-by: David Wertenteil <[email protected]>
kubescape · Oct 20, 2023 · 540eac1 · 540eac1
1 parent ae69612
commit 540eac1
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/k8sinterface/k8sdiscovery.go b/k8sinterface/k8sdiscovery.go
@@ -12,8 +12,9 @@ import (
 )
 
 const (
-	ValueNotFound       = -1
-	ResourceNotFoundErr = "resource not found"
+	ValueNotFound        = -1
+	ResourceNotFoundErr  = "resource not found"
+	ResourceForbiddenErr = "is forbidden"
 )
 
 // ResourceGroupMapping mapping of all supported Kubernetes cluster resources to apiVersion

diff --git a/k8sinterface/k8sdynamic.go b/k8sinterface/k8sdynamic.go
@@ -208,7 +208,7 @@ func (k8sAPI *KubernetesApi) CalculateWorkloadParentRecursive(workload IWorkload
 
 	parentWorkload, err := k8sAPI.GetWorkload(workload.GetNamespace(), ownerKind, ownerName)
 	if err != nil {
-		if strings.Contains(err.Error(), ResourceNotFoundErr) { // if parent is CRD
+		if strings.Contains(err.Error(), ResourceNotFoundErr) || strings.Contains(err.Error(), ResourceForbiddenErr) { // if parent is CRD
 			return workload.GetKind(), workload.GetName(), nil // parent found
 		}
 		return workload.GetKind(), workload.GetName(), err