ISSUE TYPE

• Bug Report
• Feature Idea

BUG REPORT

SUMMARY

https://github.com/Shopify/kubeaudit lists some annotations that have meaning to kubeaudit. However, these annotations are not registered and kubeaudit is using them without co-ordinating with the Kubernetes project.

Those annotations:

• container.audit.kubernetes.io/[container name].[override identifier]
• audit.kubernetes.io/pod.[override identifier]

ENVIRONMENT

• Kubeaudit version: v0.19.0

STEPS TO REPRODUCE

Visit https://kubernetes.io/docs/reference/labels-annotations-taints/ to see list of registered annotations.
Visit https://github.com/Shopify/kubeaudit to see use of these unregistered annotations.

ADDITIONAL INFORMATION

People might assume that these annotations are official, but they actually are not.

FEATURE IDEA

• If the maintainers agree with the feature as described here, I intend to submit a Pull Request myself.¹

*Proposal:

Either:

• request that the Kubernetes project register these annotations (and see this to its conclusion)
• use a Shopify-owned domain for the label namespace
• use some other domain that Shopify is allowed to use for the label namespace