Home / BeaverDeck / Docs / Insights Guide / Configuration Insights

Configuration Insights

Required Secret and ConfigMap object references used by active Pods.

Permissions: viewing checks requires insights: view. Opening a linked object or logs requires the corresponding resource permission, and the BeaverDeck ServiceAccount must be allowed to read the Kubernetes resources used by the check. Suppressing a finding requires insights: edit and affects all users.

Data Evaluated

Active Pod image pull secrets, volumes, projected volumes, envFrom, and environment value references in selected namespaces.

Checks

Check	When it reports	Alert severity
Missing References `missing-references`	An active Pod references a required Secret or ConfigMap object that does not exist in the same namespace. The scan covers `imagePullSecrets`, Secret/ConfigMap volumes, projected volumes, `envFrom`, and environment key references for init, application, and ephemeral containers. Optional references are ignored.	Critical

Open an individual check for risk context, recommended response, and limitations. Passing checks are visible when Show all checks is enabled in BeaverDeck.