fix: ignore nodes when listing permission is not allowed (#374)

* fix: ignore nodes when listing permission is not allowed Signed-off-by: chenk <[email protected]> * fix: ignore nodes when listing permission is not allowed Signed-off-by: chenk <[email protected]> --------- Signed-off-by: chenk <[email protected]>
aquasecurity · Jul 7, 2024 · 0300bc4 · 0300bc4
1 parent cf9d488
commit 0300bc4
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/pkg/k8s/k8s.go b/pkg/k8s/k8s.go
@@ -14,6 +14,7 @@ import (
 	"github.com/opencontainers/go-digest"
 	corev1 "k8s.io/api/core/v1"
 	v1 "k8s.io/api/core/v1"
+	"k8s.io/apimachinery/pkg/api/errors"
 	k8sapierror "k8s.io/apimachinery/pkg/api/errors"
 	"k8s.io/apimachinery/pkg/api/meta"
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
@@ -481,7 +482,11 @@ func GetContainer(hex string, imageName containerimage.Reference) (bom.Container
 func (c *cluster) CollectNodes(components []bom.Component) ([]bom.NodeInfo, error) {
 	nodes, err := c.clientset.CoreV1().Nodes().List(context.Background(), metav1.ListOptions{})
 	if err != nil {
-		return []bom.NodeInfo{}, err
+		if errors.IsNotFound(err) || errors.IsForbidden(err) {
+			slog.Error("Unable to list node resources", "error", err)
+			return []bom.NodeInfo{}, nil
+		}
+		return nil, err
 	}
 	nodesInfo := make([]bom.NodeInfo, 0)
 	for _, node := range nodes.Items {