Skip to content

Commit 7012178

Browse files
committed
chore: Fulfill checkov checks
1 parent f61f35c commit 7012178

2 files changed

Lines changed: 6 additions & 4 deletions

File tree

.checkov_config.yaml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,7 @@ quiet: true
1111
secrets-scan-file-type: []
1212
skip-check:
1313
- CKV_GHA_3
14+
- CKV_AZURE_112
1415
- CKV_AZURE_168
1516
- CKV_AZURE_170
1617
skip-framework:

examples/named_cluster/kms.tf

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -7,10 +7,11 @@ resource "azurerm_key_vault_key" "kms" {
77
"verify",
88
"wrapKey",
99
]
10-
key_type = "RSA"
11-
key_vault_id = azurerm_key_vault.des_vault.id
12-
name = "etcd-encryption"
13-
key_size = 2048
10+
key_type = "RSA"
11+
key_vault_id = azurerm_key_vault.des_vault.id
12+
name = "etcd-encryption"
13+
expiration_date = timeadd("${formatdate("YYYY-MM-DD", timestamp())}T00:00:00Z", "168h")
14+
key_size = 2048
1415

1516
depends_on = [
1617
azurerm_key_vault_access_policy.current_user

0 commit comments

Comments
 (0)