Popeye est un utilitaire permettant de naviguer dans les ressources de votre cluster Kubernetes et de signaler les problèmes potentiels liés à vos manifests et configurations de déploiement. En analysant vos clusters, il détecte les erreurs de configuration et garantit que les meilleures pratiques sont en place.

Son objectif est de réduire la surcharge cognitive à laquelle on est confronté lors de la gestion et de l'exploitation d'un cluster Kubernetes en production. Popeye est un outil en lecture seule, il ne modifie ni ne met à jour aucune de vos ressources ou configurations Kubernetes!

Installation

For OSX using Homebrew

brew tap derailed/popeye && brew install popeye
    MBP-de-admin:~ admin$ popeye

     ___     ___ _____   _____                                                      K          .-'-.     
    | _ \___| _ \ __\ \ / / __|                                                      8     __|      `\  
    |  _/ _ \  _/ _| \ V /| _|                                                        s   `-,-`--._   `\
    |_| \___/_| |___| |_| |___|                                                      []  .->'  a     `|-'
      Biffs`em and Buffs`em!                                                          `=/ (__/_       /  
                                                                                        \_,    `    _)  
                                                                                           `----;  |     


    GENERAL [GKE_GRAND-WATER-234018_EUROPE-WEST1-C_C-Z9JTK]
    ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅
      · Connectivity...................................................................................✅
      · MetricServer...................................................................................✅


    PERSISTENTVOLUMECLAIM
    ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅
      · Nothing to report.


    REPLICATSETS (22 SCANNED)                                                   💥 0 😱 0 🔊 0 ✅ 22 100٪
    ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅
      · cattle-prometheus/exporter-kube-state-cluster-monitoring-58f946d4d7............................✅
      · cattle-prometheus/grafana-cluster-monitoring-65d7cfccd8........................................✅
      · cattle-prometheus/prometheus-operator-monitoring-operator-85cbcb85b............................✅
      · cattle-system/cattle-cluster-agent-6d7c5db999..................................................✅
      · cert-manager/cert-manager-58c7cf9fb4...........................................................✅
      · default/ghost-fdb7889d9........................................................................✅
      · jaeger/jaeger-collector-db49d54fb..............................................................✅
      · jaeger/jaeger-query-8bf9789bf..................................................................✅
      · kube-system/event-exporter-v0.2.4-5f88c66fb7...................................................✅
      · kube-system/fluentd-gcp-scaler-59b7b75cd7......................................................✅
      · kube-system/heapster-v1.6.0-beta.1-56999d995c..................................................✅
      · kube-system/heapster-v1.6.0-beta.1-d4fc9f797...................................................✅
      · kube-system/kube-dns-6987857fdb................................................................✅
      · kube-system/kube-dns-autoscaler-bb58c6784......................................................✅
      · kube-system/kube-system-kubernetes-dashboard-698cc9d787........................................✅
      · kube-system/l7-default-backend-fd59995cd.......................................................✅
      · kube-system/metrics-server-v0.3.1-57c75779f....................................................✅
      · kube-system/metrics-server-v0.3.1-c4cddd5f5....................................................✅
      · kube-system/mothy-vulture-nginx-ingress-controller-6f5758d8f7..................................✅
      · kube-system/mothy-vulture-nginx-ingress-default-backend-7b4945d995.............................✅
      · kube-system/tiller-deploy-845fb7cfc6...........................................................✅
      · wordpress/wordpress-wordpress-7757f5c6dc.......................................................✅


    STATEFULSETS (3 SCANNED)                                                      💥 0 😱 2 🔊 0 ✅ 1 33٪
    ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅
      · cattle-prometheus/prometheus-cluster-monitoring................................................✅
      · jaeger/jaeger-cassandra........................................................................😱
        🐳 jaeger-cassandra
          😱 [POP-106] No resources defined.
      · wordpress/wordpress-mariadb....................................................................😱
        🐳 mariadb
          😱 [POP-106] No resources defined.


    SECRETS (74 SCANNED)                                                       💥 0 😱 0 🔊 43 ✅ 31 100٪
    ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅
      · cattle-prometheus/cluster-monitoring-token-ph4l7...............................................✅
      · cattle-prometheus/default-token-jmrlx..........................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · cattle-prometheus/exporter-kube-state-cluster-monitoring-token-z9rcc...........................✅
      · cattle-prometheus/exporter-node-cluster-monitoring-token-sgtjk.................................✅
      · cattle-prometheus/prometheus-cluster-monitoring................................................✅
      · cattle-prometheus/prometheus-cluster-monitoring-additional-alertmanager-configs................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · cattle-prometheus/prometheus-cluster-monitoring-additional-scrape-configs......................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · cattle-prometheus/prometheus-operator-monitoring-operator-token-kkjw4..........................✅
      · cattle-system/cattle-credentials-8f1dbc0.......................................................✅
      · cattle-system/cattle-token-xf2q4...............................................................✅
      · cattle-system/default-token-47cd8..............................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · cattle-system/kontainer-engine-token-swqwz.....................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · cert-manager/cert-manager-token-7tbf9..........................................................✅
      · cert-manager/default-token-m4lh5...............................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · cert-manager/letsencrypt-cluster...............................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · cert-manager/letsencrypt-staging-account-key...................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · default/default-token-hvcwq....................................................................✅
      · default/example-com-tls........................................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · default/letsencrypt-prod.......................................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · default/letsencrypt-staging....................................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · default/wp.gsagnard.fr-tls.....................................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · ghost/default-token-qkmhj......................................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · jaeger/default-token-hg4tm.....................................................................✅
      · jaeger/jaeger-agent-token-pf2v9................................................................✅
      · jaeger/jaeger-cassandra........................................................................✅
      · jaeger/jaeger-cassandra-schema-token-fnqzz.....................................................✅
      · jaeger/jaeger-collector-token-mmh9s............................................................✅
      · jaeger/jaeger-query-token-tr8h5................................................................✅
      · kube-public/default-token-ldzkk................................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/attachdetach-controller-token-765dv................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/certificate-controller-token-gxcxb.................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/cloud-provider-token-nmmvg.........................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/clusterrole-aggregation-controller-token-hgp4k.....................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/cronjob-controller-token-dnk2g.....................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/daemon-set-controller-token-h9dq6..................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/default-token-nwjgz................................................................✅
      · kube-system/deployment-controller-token-nkxq8..................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/disruption-controller-token-p7j4k..................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/endpoint-controller-token-zjc2t....................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/event-exporter-sa-token-xcmcf......................................................✅
      · kube-system/expand-controller-token-6pjgr......................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/fluentd-gcp-scaler-token-4dqv4.....................................................✅
      · kube-system/fluentd-gcp-token-p422z............................................................✅
      · kube-system/generic-garbage-collector-token-5w4vw..............................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/heapster-token-4b5kb...............................................................✅
      · kube-system/horizontal-pod-autoscaler-token-p5tmc..............................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/job-controller-token-wphnc.........................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/kube-dns-autoscaler-token-rdmdq....................................................✅
      · kube-system/kube-dns-token-gnrsn...............................................................✅
      · kube-system/kube-system-kubernetes-dashboard...................................................✅
      · kube-system/kube-system-kubernetes-dashboard-token-67zp2.......................................✅
      · kube-system/kubernetes-dashboard-key-holder....................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/metadata-proxy-token-nczgr.........................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/metrics-server-token-q6fnz.........................................................✅
      · kube-system/mothy-vulture-nginx-ingress-token-prhkj............................................✅
      · kube-system/namespace-controller-token-4vxxk...................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/node-controller-token-5tqct........................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/persistent-volume-binder-token-wdspg...............................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/pod-garbage-collector-token-tpjmp..................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/prometheus-to-sd-token-hcmq2.......................................................✅
      · kube-system/pv-protection-controller-token-8q68x...............................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/pvc-protection-controller-token-bv7rp..............................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/replicaset-controller-token-2xddk..................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/replication-controller-token-dfxqx.................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/resourcequota-controller-token-zvb6t...............................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/route-controller-token-plk24.......................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/service-account-controller-token-7qj56.............................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/service-controller-token-xkbm4.....................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/statefulset-controller-token-sl5c7.................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/tiller-token-cwzs6.................................................................✅
      · kube-system/ttl-controller-token-mb9vr.........................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · wordpress/default-token-2spsr..................................................................✅
      · wordpress/wordpress-mariadb....................................................................✅
      · wordpress/wordpress-wordpress..................................................................✅


    DEPLOYMENTS (20 SCANNED)                                                     💥 0 😱 15 🔊 1 ✅ 4 25٪
    ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅
      · cattle-prometheus/exporter-kube-state-cluster-monitoring.......................................✅
      · cattle-prometheus/grafana-cluster-monitoring...................................................✅
      · cattle-prometheus/prometheus-operator-monitoring-operator......................................✅
      · cattle-system/cattle-cluster-agent.............................................................😱
        😱 [POP-403] Deprecated Deployment API group "extensions/v1beta1". Use "apps/v1" instead.
        🐳 cluster-register
          😱 [POP-106] No resources defined.
      · cert-manager/cert-manager......................................................................😱
        🐳 cert-manager
          😱 [POP-106] No resources defined.
      · default/ghost..................................................................................😱
        🐳 ghost
          😱 [POP-106] No resources defined.
      · jaeger/jaeger-collector........................................................................😱
        🐳 jaeger-collector
          😱 [POP-106] No resources defined.
      · jaeger/jaeger-query............................................................................😱
        🐳 jaeger-agent-sidecar
          😱 [POP-106] No resources defined.
        🐳 jaeger-query
          😱 [POP-106] No resources defined.
      · kube-system/event-exporter-v0.2.4..............................................................😱
        😱 [POP-403] Deprecated Deployment API group "apps/v1beta1". Use "apps/v1" instead.
        🐳 event-exporter
          😱 [POP-106] No resources defined.
        🐳 prometheus-to-sd-exporter
          😱 [POP-106] No resources defined.
      · kube-system/fluentd-gcp-scaler.................................................................😱
        🐳 fluentd-gcp-scaler
          😱 [POP-106] No resources defined.
      · kube-system/heapster-v1.6.0-beta.1.............................................................😱
        😱 [POP-403] Deprecated Deployment API group "extensions/v1beta1". Use "apps/v1" instead.
        🐳 prom-to-sd
          😱 [POP-106] No resources defined.
      · kube-system/kube-dns...........................................................................😱
        😱 [POP-403] Deprecated Deployment API group "extensions/v1beta1". Use "apps/v1" instead.
        🐳 dnsmasq
          😱 [POP-107] No resource limits defined.
        🐳 prometheus-to-sd
          😱 [POP-106] No resources defined.
        🐳 sidecar
          😱 [POP-107] No resource limits defined.
      · kube-system/kube-dns-autoscaler................................................................😱
        🐳 autoscaler
          😱 [POP-107] No resource limits defined.
      · kube-system/kube-system-kubernetes-dashboard...................................................✅
      · kube-system/l7-default-backend.................................................................🔊
        🐳 default-http-backend
          🔊 [POP-108] Unamed port 8080.
      · kube-system/metrics-server-v0.3.1..............................................................😱
        😱 [POP-403] Deprecated Deployment API group "extensions/v1beta1". Use "apps/v1" instead.
      · kube-system/mothy-vulture-nginx-ingress-controller.............................................😱
        🐳 nginx-ingress-controller
          😱 [POP-106] No resources defined.
      · kube-system/mothy-vulture-nginx-ingress-default-backend........................................😱
        🐳 nginx-ingress-default-backend
          😱 [POP-106] No resources defined.
      · kube-system/tiller-deploy......................................................................😱
        🐳 tiller
          😱 [POP-106] No resources defined.
      · wordpress/wordpress-wordpress..................................................................😱
        🐳 wordpress-wordpress
          😱 [POP-107] No resource limits defined.


    NAMESPACES (9 SCANNED)                                                       💥 0 😱 0 🔊 2 ✅ 7 100٪
    ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅
      · cattle-prometheus..............................................................................✅
      · cattle-system..................................................................................✅
      · cert-manager...................................................................................✅
      · default........................................................................................✅
      · ghost..........................................................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · jaeger.........................................................................................✅
      · kube-public....................................................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system....................................................................................✅
      · wordpress......................................................................................✅


    CONFIGMAPS (27 SCANNED)                                                    💥 0 😱 0 🔊 16 ✅ 11 100٪
    ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅
      · cattle-prometheus/cluster-monitoring.v1........................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · cattle-prometheus/grafana-cluster-monitoring-dashboards........................................✅
      · cattle-prometheus/grafana-cluster-monitoring-nginx.............................................✅
      · cattle-prometheus/grafana-cluster-monitoring-provisionings.....................................✅
      · cattle-prometheus/monitoring-operator.v3.......................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · cattle-prometheus/prometheus-cluster-monitoring-nginx..........................................✅
      · cattle-prometheus/prometheus-cluster-monitoring-rulefiles-0....................................✅
      · cert-manager/cert-manager-controller...........................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · cert-manager/cert-manager.v1...................................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · jaeger/jaeger.v1...............................................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/extension-apiserver-authentication.................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/fluentd-gcp-config-old-v1.2.5......................................................✅
      · kube-system/fluentd-gcp-config-v1.2.5..........................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/gke-common-webhook-lock............................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/heapster-config....................................................................✅
      · kube-system/ingress-controller-leader-nginx....................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/ingress-gce-lock...................................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/ingress-uid........................................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/kube-dns...........................................................................✅
      · kube-system/kube-dns-autoscaler................................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/kube-system.v1.....................................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/metrics-server-config..............................................................✅
      · kube-system/mothy-vulture.v1...................................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · wordpress/wordpress-mariadb....................................................................✅
      · wordpress/wordpress-mariadb-init-scripts.......................................................✅
      · wordpress/wordpress-mariadb-tests..............................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.
      · wordpress/wordpress.v1.........................................................................🔊
        🔊 [POP-400] Used? Unable to locate resource reference.


    NETWORKPOLICY
    ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅
      · Nothing to report.


    PODSECURITYPOLICY
    ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅
      · Nothing to report.


    INGS (1 SCANNED)                                                               💥 1 😱 0 🔊 0 ✅ 0 0٪
    ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅
      · ingresses......................................................................................💥
        💥 the server could not find the requested resource.


    PERSISTENTVOLUME
    ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅
      · Nothing to report.


    SERVICES (31 SCANNED)                                                       💥 5 😱 0 🔊 11 ✅ 15 83٪
    ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅
      · cattle-prometheus/access-grafana...............................................................✅
      · cattle-prometheus/access-prometheus............................................................✅
      · cattle-prometheus/expose-grafana-metrics.......................................................✅
      · cattle-prometheus/expose-kubelets-metrics......................................................✅
      · cattle-prometheus/expose-kubernetes-metrics....................................................✅
      · cattle-prometheus/expose-node-metrics..........................................................🔊
        🔊 [POP-1102] Use of target port #9796 for service port TCP:metrics:9796. Prefer named port.
      · cattle-prometheus/expose-operator-metrics......................................................✅
      · cattle-prometheus/expose-prometheus-metrics....................................................✅
      · cattle-prometheus/prometheus-operated..........................................................✅
      · default/details................................................................................💥
        💥 [POP-1100] No pods match service selector.
        💥 [POP-1105] No associated endpoints.
      · default/ghost..................................................................................🔊
        🔊 [POP-1101] Skip ports check. No explicit ports detected on pod default/ghost-fdb7889d9-6pkks.
      · default/ingress-fe4e8cd88292fe97b543720655e96b6b...............................................🔊
        🔊 [POP-1101] Skip ports check. No explicit ports detected on pod default/ghost-fdb7889d9-6pkks.
        🔊 [POP-1104] Do you mean it? Type NodePort detected.
      · default/nginx..................................................................................💥
        💥 [POP-1100] No pods match service selector.
        💥 [POP-1105] No associated endpoints.
      · default/productpage............................................................................💥
        💥 [POP-1100] No pods match service selector.
        💥 [POP-1105] No associated endpoints.
      · default/ratings................................................................................💥
        💥 [POP-1100] No pods match service selector.
        💥 [POP-1105] No associated endpoints.
      · default/reviews................................................................................💥
        💥 [POP-1100] No pods match service selector.
        💥 [POP-1105] No associated endpoints.
      · default/wordpress..............................................................................🔊
        🔊 [POP-1104] Do you mean it? Type NodePort detected.
      · jaeger/jaeger-agent............................................................................✅
      · jaeger/jaeger-cassandra........................................................................🔊
        🔊 [POP-1102] Use of target port #7000 for service port TCP:intra:7000. Prefer named port.
        🔊 [POP-1102] Use of target port #7001 for service port TCP:tls:7001. Prefer named port.
        🔊 [POP-1102] Use of target port #7199 for service port TCP:jmx:7199. Prefer named port.
        🔊 [POP-1102] Use of target port #9042 for service port TCP:cql:9042. Prefer named port.
        🔊 [POP-1102] Use of target port #9160 for service port TCP:thrift:9160. Prefer named port.
      · jaeger/jaeger-collector........................................................................✅
      · jaeger/jaeger-query............................................................................✅
      · kube-system/default-http-backend...............................................................🔊
        🔊 [POP-1102] Use of target port #8080 for service port TCP:http:80. Prefer named port.
        🔊 [POP-1104] Do you mean it? Type NodePort detected.
      · kube-system/heapster...........................................................................🔊
        🔊  [POP-1101] Skip ports check. No explicit ports detected on pod
            kube-system/heapster-v1.6.0-beta.1-d4fc9f797-rddb5.
      · kube-system/kube-dns...........................................................................🔊
        🔊 [POP-1102] Use of target port #53 for service port UDP:dns:53. Prefer named port.
        🔊 [POP-1102] Use of target port #53 for service port TCP:dns-tcp:53. Prefer named port.
      · kube-system/kube-system-kubernetes-dashboard...................................................🔊
        🔊 [POP-1102] Use of target port #8443 for service port TCP:https:443. Prefer named port.
      · kube-system/metrics-server.....................................................................✅
      · kube-system/mothy-vulture-nginx-ingress-controller.............................................🔊
        🔊 [POP-1103] Type Loadbalancer detected. Could be expensive.
      · kube-system/mothy-vulture-nginx-ingress-default-backend........................................✅
      · kube-system/tiller-deploy......................................................................✅
      · wordpress/wordpress-mariadb....................................................................✅
      · wordpress/wordpress-wordpress..................................................................🔊
        🔊 [POP-1104] Do you mean it? Type NodePort detected.


    PODDISRUPTIONBUDGET
    ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅
      · Nothing to report.


    NODES (3 SCANNED)                                                            💥 0 😱 0 🔊 0 ✅ 3 100٪
    ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅
      · gke-c-z9jtk-default-0-c3f073f4-00d8............................................................✅
      · gke-c-z9jtk-default-0-c3f073f4-5lx1............................................................✅
      · gke-c-z9jtk-default-0-c3f073f4-wt82............................................................✅


    PODS (45 SCANNED)                                                             💥 0 😱 45 🔊 0 ✅ 0 0٪
    ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅
      · cattle-prometheus/exporter-kube-state-cluster-monitoring-58f946d4d7-dfb2r......................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 kube-state
          🔊 [POP-105] Liveness probe uses a port#, prefer a named port.
          🔊 [POP-105] Readiness probe uses a port#, prefer a named port.
      · cattle-prometheus/exporter-node-cluster-monitoring-b8szl.......................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        🐳 exporter-node
          😱 [POP-102] No probes defined.
      · cattle-prometheus/exporter-node-cluster-monitoring-bhk6b.......................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        🐳 exporter-node
          😱 [POP-102] No probes defined.
      · cattle-prometheus/exporter-node-cluster-monitoring-vvpjc.......................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        🐳 exporter-node
          😱 [POP-102] No probes defined.
      · cattle-prometheus/grafana-cluster-monitoring-65d7cfccd8-8prhv..................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 grafana
          😱 [POP-103] No liveness probe.
          🔊 [POP-105] Readiness probe uses a port#, prefer a named port.
        🐳 grafana-proxy
          😱 [POP-102] No probes defined.
      · cattle-prometheus/prometheus-cluster-monitoring-0..............................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        🐳 prometheus
          😱 [POP-102] No probes defined.
        🐳 prometheus-config-reloader
          😱 [POP-102] No probes defined.
        🐳 prometheus-proxy
          😱 [POP-102] No probes defined.
        🐳 rules-configmap-reloader
          😱 [POP-102] No probes defined.
      · cattle-prometheus/prometheus-operator-monitoring-operator-85cbcb85b-wv8nz......................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 prometheus-operator
          😱 [POP-102] No probes defined.
      · cattle-system/cattle-cluster-agent-6d7c5db999-cdx9h............................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 cluster-register
          😱 [POP-106] No resources defined.
          😱 [POP-102] No probes defined.
      · cattle-system/cattle-node-agent-2npnp..........................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 agent
          😱 [POP-106] No resources defined.
          😱 [POP-102] No probes defined.
      · cattle-system/cattle-node-agent-gxxt9..........................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 agent
          😱 [POP-106] No resources defined.
          😱 [POP-102] No probes defined.
      · cattle-system/cattle-node-agent-tvrrz..........................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 agent
          😱 [POP-106] No resources defined.
          😱 [POP-102] No probes defined.
      · cert-manager/cert-manager-58c7cf9fb4-swx8c.....................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 cert-manager
          😱 [POP-106] No resources defined.
          😱 [POP-102] No probes defined.
      · default/ghost-fdb7889d9-6pkks..................................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-300] Using "default" ServiceAccount.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 ghost
          😱 [POP-107] No resource limits defined.
          😱 [POP-102] No probes defined.
      · jaeger/jaeger-agent-4g6vd......................................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 jaeger-agent
          😱 [POP-106] No resources defined.
      · jaeger/jaeger-agent-kgtnx......................................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 jaeger-agent
          😱 [POP-106] No resources defined.
      · jaeger/jaeger-agent-mn4lc......................................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 jaeger-agent
          😱 [POP-106] No resources defined.
      · jaeger/jaeger-cassandra-0......................................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-300] Using "default" ServiceAccount.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 jaeger-cassandra
          😱 [POP-106] No resources defined.
      · jaeger/jaeger-cassandra-1......................................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-300] Using "default" ServiceAccount.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 jaeger-cassandra
          😱 [POP-106] No resources defined.
      · jaeger/jaeger-cassandra-2......................................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-300] Using "default" ServiceAccount.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 jaeger-cassandra
          😱 [POP-106] No resources defined.
      · jaeger/jaeger-cassandra-schema-fw56c...........................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 jaeger-cassandra-schema
          😱 [POP-106] No resources defined.
      · jaeger/jaeger-collector-db49d54fb-bxgcf........................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 jaeger-collector
          😱 [POP-106] No resources defined.
      · jaeger/jaeger-query-8bf9789bf-w865p............................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 jaeger-agent-sidecar
          😱 [POP-106] No resources defined.
        🐳 jaeger-query
          😱 [POP-106] No resources defined.
      · kube-system/event-exporter-v0.2.4-5f88c66fb7-fjq5m.............................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 event-exporter
          😱 [POP-106] No resources defined.
          😱 [POP-102] No probes defined.
        🐳 prometheus-to-sd-exporter
          😱 [POP-106] No resources defined.
          😱 [POP-102] No probes defined.
      · kube-system/fluentd-gcp-scaler-59b7b75cd7-jl9k7................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 fluentd-gcp-scaler
          😱 [POP-106] No resources defined.
          😱 [POP-102] No probes defined.
      · kube-system/fluentd-gcp-v3.2.0-47gkt...........................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 fluentd-gcp
          😱 [POP-104] No readiness probe.
          😱 [POP-110] Memory Current/Request (162Mi/200Mi) reached user 80% threshold (81%).
        🐳 prometheus-to-sd-exporter
          😱 [POP-106] No resources defined.
          😱 [POP-102] No probes defined.
      · kube-system/fluentd-gcp-v3.2.0-85xjs...........................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 fluentd-gcp
          😱 [POP-104] No readiness probe.
        🐳 prometheus-to-sd-exporter
          😱 [POP-106] No resources defined.
          😱 [POP-102] No probes defined.
      · kube-system/fluentd-gcp-v3.2.0-m42p7...........................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 fluentd-gcp
          😱 [POP-104] No readiness probe.
        🐳 prometheus-to-sd-exporter
          😱 [POP-106] No resources defined.
          😱 [POP-102] No probes defined.
      · kube-system/heapster-v1.6.0-beta.1-d4fc9f797-rddb5.............................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 heapster
          🔊 [POP-105] Liveness probe uses a port#, prefer a named port.
          😱 [POP-104] No readiness probe.
        🐳 heapster-nanny
          😱 [POP-102] No probes defined.
        🐳 prom-to-sd
          😱 [POP-106] No resources defined.
          😱 [POP-102] No probes defined.
      · kube-system/kube-dns-6987857fdb-gqfdr..........................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 dnsmasq
          😱 [POP-107] No resource limits defined.
          🔊 [POP-105] Liveness probe uses a port#, prefer a named port.
          😱 [POP-104] No readiness probe.
        🐳 kubedns
          🔊 [POP-105] Liveness probe uses a port#, prefer a named port.
          🔊 [POP-105] Readiness probe uses a port#, prefer a named port.
        🐳 prometheus-to-sd
          😱 [POP-106] No resources defined.
          😱 [POP-102] No probes defined.
        🐳 sidecar
          😱 [POP-107] No resource limits defined.
          🔊 [POP-105] Liveness probe uses a port#, prefer a named port.
          😱 [POP-104] No readiness probe.
      · kube-system/kube-dns-6987857fdb-m2w95..........................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 dnsmasq
          😱 [POP-107] No resource limits defined.
          🔊 [POP-105] Liveness probe uses a port#, prefer a named port.
          😱 [POP-104] No readiness probe.
        🐳 kubedns
          🔊 [POP-105] Liveness probe uses a port#, prefer a named port.
          🔊 [POP-105] Readiness probe uses a port#, prefer a named port.
        🐳 prometheus-to-sd
          😱 [POP-106] No resources defined.
          😱 [POP-102] No probes defined.
        🐳 sidecar
          😱 [POP-107] No resource limits defined.
          🔊 [POP-105] Liveness probe uses a port#, prefer a named port.
          😱 [POP-104] No readiness probe.
      · kube-system/kube-dns-autoscaler-bb58c6784-kjp58................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 autoscaler
          😱 [POP-107] No resource limits defined.
          😱 [POP-102] No probes defined.
      · kube-system/kube-proxy-gke-c-z9jtk-default-0-c3f073f4-00d8.....................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 kube-proxy
          😱 [POP-107] No resource limits defined.
          😱 [POP-102] No probes defined.
      · kube-system/kube-proxy-gke-c-z9jtk-default-0-c3f073f4-5lx1.....................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 kube-proxy
          😱 [POP-107] No resource limits defined.
          😱 [POP-102] No probes defined.
      · kube-system/kube-proxy-gke-c-z9jtk-default-0-c3f073f4-wt82.....................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 kube-proxy
          😱 [POP-107] No resource limits defined.
          😱 [POP-102] No probes defined.
      · kube-system/kube-system-kubernetes-dashboard-698cc9d787-mp55j..................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 kubernetes-dashboard
          🔊 [POP-105] Liveness probe uses a port#, prefer a named port.
          😱 [POP-104] No readiness probe.
      · kube-system/l7-default-backend-fd59995cd-2phb7.................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-300] Using "default" ServiceAccount.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 default-http-backend
          🔊 [POP-105] Liveness probe uses a port#, prefer a named port.
          😱 [POP-104] No readiness probe.
          🔊 [POP-108] Unamed port 8080.
      · kube-system/metrics-server-v0.3.1-57c75779f-wk5zq..............................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 metrics-server
          😱 [POP-102] No probes defined.
        🐳 metrics-server-nanny
          😱 [POP-102] No probes defined.
      · kube-system/mothy-vulture-nginx-ingress-controller-6f5758d8f7-m5dn5............................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 nginx-ingress-controller
          😱 [POP-106] No resources defined.
          🔊 [POP-105] Liveness probe uses a port#, prefer a named port.
          🔊 [POP-105] Readiness probe uses a port#, prefer a named port.
      · kube-system/mothy-vulture-nginx-ingress-default-backend-7b4945d995-wbzmc.......................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-300] Using "default" ServiceAccount.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 nginx-ingress-default-backend
          😱 [POP-106] No resources defined.
          🔊 [POP-105] Liveness probe uses a port#, prefer a named port.
          🔊 [POP-105] Readiness probe uses a port#, prefer a named port.
      · kube-system/prometheus-to-sd-7n5dp.............................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 prometheus-to-sd
          😱 [POP-102] No probes defined.
      · kube-system/prometheus-to-sd-qm7f4.............................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 prometheus-to-sd
          😱 [POP-102] No probes defined.
          😱 [POP-109] CPU Current/Request (1m/1m) reached user 80% threshold (100%).
      · kube-system/prometheus-to-sd-xmgpr.............................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 prometheus-to-sd
          😱 [POP-102] No probes defined.
      · kube-system/tiller-deploy-845fb7cfc6-wvfbn.....................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 tiller
          😱 [POP-106] No resources defined.
          🔊 [POP-105] Liveness probe uses a port#, prefer a named port.
          🔊 [POP-105] Readiness probe uses a port#, prefer a named port.
      · wordpress/wordpress-mariadb-0..................................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-300] Using "default" ServiceAccount.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 mariadb
          😱 [POP-106] No resources defined.
      · wordpress/wordpress-wordpress-7757f5c6dc-s8c74.................................................😱
        🔊 [POP-206] No PodDisruptionBudget defined.
        😱 [POP-300] Using "default" ServiceAccount.
        😱 [POP-301] Connects to API Server? ServiceAccount token is mounted.
        😱 [POP-302] Containers are running as root.
        🐳 wordpress-wordpress
          😱 [POP-107] No resource limits defined.


    SERVICEACCOUNTS (59 SCANNED)                                                  💥 59 😱 0 🔊 0 ✅ 0 0٪
    ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅
      · cattle-prometheus/cluster-monitoring...........................................................💥
        💥 [POP-304] References a secret "cluster-monitoring-token-ph4l7" which does not exists.
      · cattle-prometheus/default......................................................................💥
        💥 [POP-304] References a secret "default-token-jmrlx" which does not exists.
        🔊 [POP-400] Used? Unable to locate resource reference.
      · cattle-prometheus/exporter-kube-state-cluster-monitoring.......................................💥
        💥  [POP-304] References a secret "exporter-kube-state-cluster-monitoring-token-z9rcc" which does
            not exists.
      · cattle-prometheus/exporter-node-cluster-monitoring.............................................💥
        💥  [POP-304] References a secret "exporter-node-cluster-monitoring-token-sgtjk" which does not
            exists.
      · cattle-prometheus/prometheus-operator-monitoring-operator......................................💥
        💥  [POP-304] References a secret "prometheus-operator-monitoring-operator-token-kkjw4" which
            does not exists.
      · cattle-system/cattle...........................................................................💥
        💥 [POP-304] References a secret "cattle-token-xf2q4" which does not exists.
      · cattle-system/default..........................................................................💥
        💥 [POP-304] References a secret "default-token-47cd8" which does not exists.
        🔊 [POP-400] Used? Unable to locate resource reference.
      · cattle-system/kontainer-engine.................................................................💥
        💥 [POP-304] References a secret "kontainer-engine-token-swqwz" which does not exists.
      · cert-manager/cert-manager......................................................................💥
        💥 [POP-304] References a secret "cert-manager-token-7tbf9" which does not exists.
      · cert-manager/default...........................................................................💥
        💥 [POP-304] References a secret "default-token-m4lh5" which does not exists.
        🔊 [POP-400] Used? Unable to locate resource reference.
      · default/default................................................................................💥
        💥 [POP-304] References a secret "default-token-hvcwq" which does not exists.
      · ghost/default..................................................................................💥
        💥 [POP-304] References a secret "default-token-qkmhj" which does not exists.
        🔊 [POP-400] Used? Unable to locate resource reference.
      · jaeger/default.................................................................................💥
        💥 [POP-304] References a secret "default-token-hg4tm" which does not exists.
      · jaeger/jaeger-agent............................................................................💥
        💥 [POP-304] References a secret "jaeger-agent-token-pf2v9" which does not exists.
      · jaeger/jaeger-cassandra-schema.................................................................💥
        💥 [POP-304] References a secret "jaeger-cassandra-schema-token-fnqzz" which does not exists.
      · jaeger/jaeger-collector........................................................................💥
        💥 [POP-304] References a secret "jaeger-collector-token-mmh9s" which does not exists.
      · jaeger/jaeger-query............................................................................💥
        💥 [POP-304] References a secret "jaeger-query-token-tr8h5" which does not exists.
      · kube-public/default............................................................................💥
        💥 [POP-304] References a secret "default-token-ldzkk" which does not exists.
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/attachdetach-controller............................................................💥
        💥 [POP-304] References a secret "attachdetach-controller-token-765dv" which does not exists.
      · kube-system/certificate-controller.............................................................💥
        💥 [POP-304] References a secret "certificate-controller-token-gxcxb" which does not exists.
      · kube-system/cloud-provider.....................................................................💥
        💥 [POP-304] References a secret "cloud-provider-token-nmmvg" which does not exists.
      · kube-system/clusterrole-aggregation-controller.................................................💥
        💥  [POP-304] References a secret "clusterrole-aggregation-controller-token-hgp4k" which does not
            exists.
      · kube-system/cronjob-controller.................................................................💥
        💥 [POP-304] References a secret "cronjob-controller-token-dnk2g" which does not exists.
      · kube-system/daemon-set-controller..............................................................💥
        💥 [POP-304] References a secret "daemon-set-controller-token-h9dq6" which does not exists.
      · kube-system/default............................................................................💥
        💥 [POP-304] References a secret "default-token-nwjgz" which does not exists.
      · kube-system/deployment-controller..............................................................💥
        💥 [POP-304] References a secret "deployment-controller-token-nkxq8" which does not exists.
      · kube-system/disruption-controller..............................................................💥
        💥 [POP-304] References a secret "disruption-controller-token-p7j4k" which does not exists.
      · kube-system/endpoint-controller................................................................💥
        💥 [POP-304] References a secret "endpoint-controller-token-zjc2t" which does not exists.
      · kube-system/event-exporter-sa..................................................................💥
        💥 [POP-304] References a secret "event-exporter-sa-token-xcmcf" which does not exists.
      · kube-system/expand-controller..................................................................💥
        💥 [POP-304] References a secret "expand-controller-token-6pjgr" which does not exists.
      · kube-system/fluentd-gcp........................................................................💥
        💥 [POP-304] References a secret "fluentd-gcp-token-p422z" which does not exists.
      · kube-system/fluentd-gcp-scaler.................................................................💥
        💥 [POP-304] References a secret "fluentd-gcp-scaler-token-4dqv4" which does not exists.
      · kube-system/generic-garbage-collector..........................................................💥
        💥 [POP-304] References a secret "generic-garbage-collector-token-5w4vw" which does not exists.
      · kube-system/heapster...........................................................................💥
        💥 [POP-304] References a secret "heapster-token-4b5kb" which does not exists.
      · kube-system/horizontal-pod-autoscaler..........................................................💥
        💥 [POP-304] References a secret "horizontal-pod-autoscaler-token-p5tmc" which does not exists.
      · kube-system/job-controller.....................................................................💥
        💥 [POP-304] References a secret "job-controller-token-wphnc" which does not exists.
      · kube-system/kube-dns...........................................................................💥
        💥 [POP-304] References a secret "kube-dns-token-gnrsn" which does not exists.
      · kube-system/kube-dns-autoscaler................................................................💥
        💥 [POP-304] References a secret "kube-dns-autoscaler-token-rdmdq" which does not exists.
      · kube-system/kube-system-kubernetes-dashboard...................................................💥
        💥  [POP-304] References a secret "kube-system-kubernetes-dashboard-token-67zp2" which does not
            exists.
      · kube-system/metadata-proxy.....................................................................💥
        💥 [POP-304] References a secret "metadata-proxy-token-nczgr" which does not exists.
        🔊 [POP-400] Used? Unable to locate resource reference.
      · kube-system/metrics-server.....................................................................💥
        💥 [POP-304] References a secret "metrics-server-token-q6fnz" which does not exists.
      · kube-system/mothy-vulture-nginx-ingress........................................................💥
        💥 [POP-304] References a secret "mothy-vulture-nginx-ingress-token-prhkj" which does not exists.
      · kube-system/namespace-controller...............................................................💥
        💥 [POP-304] References a secret "namespace-controller-token-4vxxk" which does not exists.
      · kube-system/node-controller....................................................................💥
        💥 [POP-304] References a secret "node-controller-token-5tqct" which does not exists.
      · kube-system/persistent-volume-binder...........................................................💥
        💥 [POP-304] References a secret "persistent-volume-binder-token-wdspg" which does not exists.
      · kube-system/pod-garbage-collector..............................................................💥
        💥 [POP-304] References a secret "pod-garbage-collector-token-tpjmp" which does not exists.
      · kube-system/prometheus-to-sd...................................................................💥
        💥 [POP-304] References a secret "prometheus-to-sd-token-hcmq2" which does not exists.
      · kube-system/pv-protection-controller...........................................................💥
        💥 [POP-304] References a secret "pv-protection-controller-token-8q68x" which does not exists.
      · kube-system/pvc-protection-controller..........................................................💥
        💥 [POP-304] References a secret "pvc-protection-controller-token-bv7rp" which does not exists.
      · kube-system/replicaset-controller..............................................................💥
        💥 [POP-304] References a secret "replicaset-controller-token-2xddk" which does not exists.
      · kube-system/replication-controller.............................................................💥
        💥 [POP-304] References a secret "replication-controller-token-dfxqx" which does not exists.
      · kube-system/resourcequota-controller...........................................................💥
        💥 [POP-304] References a secret "resourcequota-controller-token-zvb6t" which does not exists.
      · kube-system/route-controller...................................................................💥
        💥 [POP-304] References a secret "route-controller-token-plk24" which does not exists.
      · kube-system/service-account-controller.........................................................💥
        💥 [POP-304] References a secret "service-account-controller-token-7qj56" which does not exists.
      · kube-system/service-controller.................................................................💥
        💥 [POP-304] References a secret "service-controller-token-xkbm4" which does not exists.
      · kube-system/statefulset-controller.............................................................💥
        💥 [POP-304] References a secret "statefulset-controller-token-sl5c7" which does not exists.
      · kube-system/tiller.............................................................................💥
        💥 [POP-304] References a secret "tiller-token-cwzs6" which does not exists.
      · kube-system/ttl-controller.....................................................................💥
        💥 [POP-304] References a secret "ttl-controller-token-mb9vr" which does not exists.
      · wordpress/default..............................................................................💥
        💥 [POP-304] References a secret "default-token-2spsr" which does not exists.


    DAEMONSETS (7 SCANNED)                                                        💥 0 😱 4 🔊 0 ✅ 3 42٪
    ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅
      · cattle-prometheus/exporter-node-cluster-monitoring.............................................✅
      · cattle-system/cattle-node-agent................................................................😱
        😱 [POP-403] Deprecated DaemonSet API group "extensions/v1beta1". Use "apps/v1" instead.
        🐳 agent
          😱 [POP-106] No resources defined.
      · jaeger/jaeger-agent............................................................................😱
        🐳 jaeger-agent
          😱 [POP-106] No resources defined.
      · kube-system/fluentd-gcp-v3.2.0.................................................................😱
        😱 [POP-403] Deprecated DaemonSet API group "extensions/v1beta1". Use "apps/v1" instead.
        🐳 prometheus-to-sd-exporter
          😱 [POP-106] No resources defined.
      · kube-system/metadata-proxy-v0.1................................................................😱
        😱 [POP-403] Deprecated DaemonSet API group "extensions/v1beta1". Use "apps/v1" instead.
      · kube-system/nvidia-gpu-device-plugin...........................................................✅
      · kube-system/prometheus-to-sd...................................................................✅


    HORIZONTALPODAUTOSCALER
    ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅
      · Nothing to report.


    SUMMARY
    ┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅┅
    Your cluster score: 56 -- E
                                                                                    S          .-'-.     
                                                                                     o     __| E    `\  
                                                                                      S   `-,-`--._   `\
                                                                                     []  .->'  O     `|-'
                                                                                      `=/ (__/_       /  
                                                                                        \_,    `    _)  
                                                                                           `----;  |    

Premier score obtenu sur mon cluster Rancher GKE - pas terrible du tout...

Popeye analyse votre cluster pour rechercher les meilleures pratiques et les problèmes potentiels. Actuellement, Popeye ne regarde que les nœuds, les namespaces, les pods et les services. Les sanitizers ont pour but de remédier aux erreurs de configuration, telles que l’inadéquation des ports, les ressources épuisées ou inutilisées, l’utilisation des métriques, les sondes, les images de conteneur, les règles RBAC, les ressources nues, etc.  Popeye n'est pas un autre outil d'analyse statique. Il exécute et inspecte les ressources Kubernetes sur des clusters actifs et assainit les ressources telles qu'elles sont à l'état sauvage!

Morphologie

Le rapport sur l'assainisseur génère chaque groupe de ressources analysé et leurs problèmes potentiels. Le rapport est codé par couleur/emoji en termes de niveaux de gravité de l’assainisseur:  

Level Icon Jurassic Couleur Description Ok ✅ OK Vert Heureux!

Info 🔊 I BlueGreen FYI

Avertir Issue W Problème potentiel : jaune

Erreur 💥 E Rouge : Action requise

La section d'en-tête de chaque ressource Kubenertes analysée fournit un décompte récapitulatif des problèmes récapitulatifs pour chacune des catégories ci-dessus.  La section Résumé fournit un score Popeye basé sur la passe de désinfection du cluster donné.