Security ClusterRole - Keda Helm Chart - Feature disable ScaledJob

[giandv]

Use-Case

If in our Keda configuration is not used ScaledJob could we disable this object and related rules?

Kubescape Security Analysis

Security Standard Requirement Link: https://hub.armosec.io/docs/c-0007

Specification

What do you think about adding new flag in the operator object located in values.yaml?

operator:
   enableScaledJobs: true

Thanks for the support

[zroubalik]

FWIW, we would also need to update core operator (don't start a controller and bunch of other things)

[giandv]

Hi @zroubalik, thanks for your reply.
Or could accomodate the opposite: i.e. disable ScaledJob objects, thus affecting the sections in the CRDs.

operator:
   disableScaledJobs: true

Default value false and handle conditions like that:

Example ClusterRole keda-operator

...
{{- if .Values.operator.disableScaledJobs }}{{- else }}
- apiGroups:
  - batch
  resources:
  - jobs
  verbs:
  - create
  - delete
  - get
  - list
  - patch
  - update
  - watch
{{- end }}
...

What do you think?