feat: add K3S exceptions

pkg/kor/exceptions/clusterroles/clusterroles.json

@@ -83,6 +83,14 @@
     {
       "Namespace": "",
       "ResourceName": "view"
+    },
+    {
+      "Namespace": "",
+      "ResourceName": "system:node-bootstrapper"
+    },
+    {
+      "Namespace": "",
+      "ResourceName": "system:aggregated-metrics-reader"
     }
   ]
 }

pkg/kor/exceptions/configmaps/configmaps.json

@@ -79,6 +79,10 @@
     {
       "Namespace": "kubernetes-dashboard",
       "ResourceName": "kubernetes-dashboard-settings"
+    },
+    {
+      "Namespace": "kube-system",
+      "ResourceName": "cluster-dns"
     }
   ]
 }

pkg/kor/exceptions/crds/crds.json

@@ -83,6 +83,86 @@
     {
       "Namespace": "",
       "ResourceName": "volumesnapshots.snapshot.storage.k8s.io"
+    },
+    {
+      "Namespace": "",
+      "ResourceName": "etcdsnapshotfiles.k3s.cattle.io"
+    },
+    {
+      "Namespace": "",
+      "ResourceName": "helmchartconfigs.helm.cattle.io"
+    },
+    {
+      "Namespace": "",
+      "ResourceName": "ingressrouteudps.traefik.io"
+    },
+    {
+      "Namespace": "",
+      "ResourceName": "ingressrouteudps.traefik.containo.us"
+    },
+    {
+      "Namespace": "",
+      "ResourceName": "middlewaretcps.traefik.io"
+    },
+    {
+      "Namespace": "",
+      "ResourceName": "ingressroutetcps.traefik.io"
+    },
+    {
+      "Namespace": "",
+      "ResourceName": "serverstransports.traefik.io"
+    },
+    {
+      "Namespace": "",
+      "ResourceName": "middlewares.traefik.containo.us"
+    },
+    {
+      "Namespace": "",
+      "ResourceName": "serverstransports.traefik.containo.us"
+    },
+    {
+      "Namespace": "",
+      "ResourceName": "tlsstores.traefik.io"
+    },
+    {
+      "Namespace": "",
+      "ResourceName": "traefikservices.traefik.io"
+    },
+    {
+      "Namespace": "",
+      "ResourceName": "tlsstores.traefik.containo.us"
+    },
+    {
+      "Namespace": "",
+      "ResourceName": "tlsoptions.traefik.io"
+    },
+    {
+      "Namespace": "",
+      "ResourceName": "traefikservices.traefik.containo.us"
+    },
+    {
+      "Namespace": "",
+      "ResourceName": "serverstransporttcps.traefik.io"
+    },
+    {
+      "Namespace": "",
+      "ResourceName": "middlewaretcps.traefik.containo.us"
+    },
+    {
+      "Namespace": "",
+      "ResourceName": "ingressroutes.traefik.containo.us"
+    },
+    {
+      "Namespace": "",
+      "ResourceName": "tlsoptions.traefik.containo.us"
+    },
+    {
+      "Namespace": "",
+      "ResourceName": "ingressroutetcps.traefik.containo.us"
+    },
+    {
+      "Namespace": "",
+      "ResourceName": "middlewares.traefik.io"
     }
   ]
-}
+}

pkg/kor/exceptions/jobs/jobs.json

@@ -0,0 +1,13 @@
+{
+    "exceptionJobs": [
+      {
+        "Namespace": "kube-system",
+        "ResourceName": "helm-install-traefik-crd"
+      },
+      {
+        "Namespace": "kube-system",
+        "ResourceName": "helm-install-traefik"
+      }
+    ]
+  }
+

pkg/kor/exceptions/secrets/secrets.json

@@ -15,6 +15,14 @@
     {
       "Namespace": "kubernetes-dashboard",
       "ResourceName": "kubernetes-dashboard-key-holder"
+    },
+    {
+      "Namespace": "kube-system",
+      "ResourceName": "k3s-serving"
+    },
+    {
+      "Namespace": "kube-system",
+      "ResourceName": "*.node-password.k3s"
     }
   ]
 }

pkg/kor/exceptions/storageclasses/storageclasses.json

@@ -43,6 +43,10 @@
     {
       "Namespace": "",
       "ResourceName": "standard-rwo"
+    },
+    {
+      "Namespace": "",
+      "ResourceName": "local-path"
     }
   ]
 }

pkg/kor/jobs.go

@@ -3,6 +3,7 @@ package kor
 import (
 	"bytes"
 	"context"
+	_ "embed"
 	"encoding/json"
 	"fmt"
 	"os"
@@ -13,19 +14,31 @@ import (
 	"github.com/yonahd/kor/pkg/filters"
 )
 
+//go:embed exceptions/jobs/jobs.json
+var jobsConfig []byte
+
 func processNamespaceJobs(clientset kubernetes.Interface, namespace string, filterOpts *filters.Options) ([]string, error) {
 	jobsList, err := clientset.BatchV1().Jobs(namespace).List(context.TODO(), metav1.ListOptions{LabelSelector: filterOpts.IncludeLabels})
 	if err != nil {
 		return nil, err
 	}
 
+	config, err := unmarshalConfig(jobsConfig)
+	if err != nil {
+		return nil, err
+	}
+
 	var unusedJobNames []string
 
 	for _, job := range jobsList.Items {
 		if pass, _ := filter.Run(filterOpts); pass {
 			continue
 		}
 
+		if isResourceException(job.Name, job.Namespace, config.ExceptionJobs) {
+			continue
+		}
+
 		// if the job has completionTime and succeeded count greater than zero, think the job is completed
 		if job.Status.CompletionTime != nil && job.Status.Succeeded > 0 {
 			unusedJobNames = append(unusedJobNames, job.Name)

pkg/kor/kor.go

@@ -38,6 +38,7 @@ type Config struct {
 	ExceptionServiceAccounts []ExceptionResource `json:"exceptionServiceAccounts"`
 	ExceptionServices        []ExceptionResource `json:"exceptionServices"`
 	ExceptionStorageClasses  []ExceptionResource `json:"exceptionStorageClasses"`
+	ExceptionJobs            []ExceptionResource `json:"exceptionJobs"`
 	// Add other configurations if needed
 }