fix: update native scanner to check for running pods only

Signed-off-by: deggja <[email protected]>
deggja · Jun 23, 2024 · 1a5460a · 1a5460a
1 parent ce3549a
commit 1a5460a
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/backend/pkg/k8s/scanner.go b/backend/pkg/k8s/scanner.go
@@ -165,6 +165,9 @@ func determineUnprotectedPods(clientset *kubernetes.Clientset, nsName string, co
 	}
 
 	for _, pod := range allPods.Items {
+		if pod.Status.Phase != v1.PodRunning {
+			continue
+		}
 		if !coveredPods[pod.Name] {
 			podDetail := fmt.Sprintf("%s %s %s", nsName, pod.Name, pod.Status.PodIP)
 			if !containsPodDetail(scanResult.UnprotectedPods, podDetail) {