10 lines
360 B
YAML
10 lines
360 B
YAML
|
misconfigurations:
|
||
|
|
- id: KSV-0109
|
||
|
|
paths:
|
||
|
|
- "deploy/kubernetes/base/configmap.yaml"
|
||
|
|
statement: >-
|
||
|
|
RTC_TOKEN_ISSUER and the *_TTL values are public runtime metadata, not
|
||
|
|
credentials. All RTC signing keys, provider credentials, and token key
|
||
|
|
material are mounted from Kubernetes Secrets or the production CSI
|
||
|
|
secret store.
|