analysis

Documentation

Index

• Constants
• func CheckForUnmountableSecrets(g osgraph.Graph, podSpecNode *kubegraph.PodSpecNode) []*kubegraph.SecretNode
• func CheckMissingMountedSecrets(g osgraph.Graph, podSpecNode *kubegraph.PodSpecNode) []*kubegraph.SecretNode
• func FindDuelingReplicationControllers(g osgraph.Graph) []osgraph.Marker
• func FindMissingSecrets(g osgraph.Graph) []osgraph.Marker
• func FindRestartingPods(g osgraph.Graph) []osgraph.Marker
• func FindUnmountableSecrets(g osgraph.Graph) []osgraph.Marker

Constants

const (
	RestartingPodWarning = "RestartingPod"

	RestartThreshold = 3
)

const (
	UnmountableSecretWarning = "UnmountableSecret"
	MissingSecretWarning     = "MissingSecret"
)

const (
	DuelingRepliationControllerWarning = "DuelingReplicationControllers"
)

Functions

func CheckForUnmountableSecrets

func CheckForUnmountableSecrets(g osgraph.Graph, podSpecNode *kubegraph.PodSpecNode) []*kubegraph.SecretNode

CheckForUnmountableSecrets checks to be sure that all the referenced secrets are mountable (by service account)

func CheckMissingMountedSecrets

func CheckMissingMountedSecrets(g osgraph.Graph, podSpecNode *kubegraph.PodSpecNode) []*kubegraph.SecretNode

CheckMissingMountedSecrets checks to be sure that all the referenced secrets are present (not synthetic)

func FindDuelingReplicationControllers

func FindDuelingReplicationControllers(g osgraph.Graph) []osgraph.Marker

func FindMissingSecrets

func FindMissingSecrets(g osgraph.Graph) []osgraph.Marker

FindMissingSecrets inspects all PodSpecs for any Secret reference that is a synthetic node (not a pre-existing node in the graph)

func FindRestartingPods

func FindRestartingPods(g osgraph.Graph) []osgraph.Marker

FindRestartingPods inspects all Pods to see if they've restarted more than the threshold

func FindUnmountableSecrets

func FindUnmountableSecrets(g osgraph.Graph) []osgraph.Marker

FindUnmountableSecrets inspects all PodSpecs for any Secret reference that isn't listed as mountable by the referenced ServiceAccount