fix: update cilium scanners to only check running pods

Signed-off-by: deggja <[email protected]>
deggja · Jun 23, 2024 · 9e19faf · 9e19faf
1 parent 1a5460a
commit 9e19faf
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/backend/pkg/k8s/cilium-scanner.go b/backend/pkg/k8s/cilium-scanner.go
@@ -189,6 +189,9 @@ func determinePodCoverage(clientset *kubernetes.Clientset, nsName string, polici
 	}
 
 	for _, pod := range pods.Items {
+		if pod.Status.Phase != corev1.PodRunning {
+			continue
+		}
 		podIdentifier := fmt.Sprintf("%s/%s", pod.Namespace, pod.Name)
 		if _, exists := globallyProtectedPods[podIdentifier]; !exists {
 			if !IsPodProtected(writer, clientset, pod, policies, hasDenyAll, globallyProtectedPods) {