Commit Graph

101 Commits (ba57ef4acca2587519acea7ff5302e271b4bd2d5)

Author SHA1 Message Date
Varsha Varadarajan ba57ef4acc
Merge pull request #32 from digitalocean/varsha/webhook
Admission webhook check: Add a doks specific error is webhook applies to objects in kube-system namespace
2019-07-02 19:13:40 -04:00
Varsha Varadarajan 279004da51 Check if webhook config references a service before throwing an error 2019-07-02 17:39:26 -04:00
Varsha Varadarajan 5a246761b2 Update checks.md for admission controller webhooks 2019-07-02 17:18:05 -04:00
Varsha Varadarajan 92e0e9dfe2 Admission webhook check: Add a doks specific error is webhook applies to objects in kube-system namespace 2019-07-02 17:18:05 -04:00
Varsha Varadarajan dc2b0df5c3 Rename unused-pvc.go => unused_pvc.go 2019-07-02 17:16:40 -04:00
Adam Wolfe Gordon a99239de80
Merge pull request #33 from digitalocean/awg/open-source
Prepare codebase for open source release
2019-07-02 14:38:58 -06:00
Adam Wolfe Gordon 401837a7aa Add CI check for license headers
Otherwise no one is ever going to add them.
2019-07-02 13:58:00 -06:00
Adam Wolfe Gordon 2b080d1b9a Add license header to all files 2019-07-02 13:30:42 -06:00
Adam Wolfe Gordon b7257f4246 Add contributing guide and license
In preparation for open source release.
2019-07-02 13:30:14 -06:00
Varsha Varadarajan 1c5e8cbfec
Merge pull request #28 from digitalocean/varsha/unused-secrets
Unused secrets: check if there are unused secrets in the cluster.
2019-07-01 21:21:36 -04:00
Varsha Varadarajan 9dc3f3f18c Check for references to secret in projected volume. 2019-07-01 21:15:14 -04:00
Varsha Varadarajan 1e9e19a078 Unused secrets: check if there are unused secrets in the cluster. 2019-07-01 21:09:07 -04:00
Varsha Varadarajan f9de06ea39
Merge pull request #25 from digitalocean/varsha/unused-cm
Unused config map: check if there are unused configmaps in the cluster.
2019-07-01 21:06:25 -04:00
Varsha Varadarajan 74152bddb0 Use empty struct in map while checking for object references 2019-07-01 21:05:56 -04:00
Varsha Varadarajan d0eb5a4b0a Check for config map references in nodes and projected volumes 2019-07-01 10:41:37 -04:00
Varsha Varadarajan 2d097ba31a Unused config map: check if there are unused configmaps in the cluster. 2019-07-01 09:31:09 -04:00
Varsha Varadarajan 5bbf305db0
Merge pull request #27 from digitalocean/varsha/unused-pvc
Unused PVC: Check for unused claims in the cluster.
2019-07-01 09:26:15 -04:00
Varsha Varadarajan 05502e3b32 Unused PVC: Check for unused claims in the cluster. 2019-07-01 09:25:46 -04:00
Varsha Varadarajan f1a6a18208
Merge pull request #31 from digitalocean/varsha/cli-options
Provide cli flags for accepting list of groups and checks to run/ignore
2019-06-30 14:10:58 -04:00
Varsha Varadarajan eee7b8c4a8 Use constructor to initialize instances of CheckFilter 2019-06-30 14:10:34 -04:00
Varsha Varadarajan ad278622e4 Show an error if group not found. 2019-06-28 13:44:46 -04:00
Varsha Varadarajan 4fdebb22d3 Use check filter to store groups and checks to run/ignore 2019-06-28 13:40:52 -04:00
Varsha Varadarajan 4dbcbefec6 Run command: provide option to whitelist and blacklist checks 2019-06-28 10:44:53 -04:00
Varsha Varadarajan 1b032d145b Run command: Provide options to whitelist and blacklist groups 2019-06-28 10:01:02 -04:00
Varsha Varadarajan d97a10d1b3 List command: Provide option to whitelist and blacklist groups for listing 2019-06-28 09:42:21 -04:00
Varsha Varadarajan f146baf9e0
Merge pull request #30 from digitalocean/varsha/fix-golint-errors
Fix golint errors.
2019-06-28 08:38:26 -04:00
Varsha Varadarajan f0618e9133 Fix golint errors. 2019-06-28 08:33:20 -04:00
Varsha Varadarajan a9460b1dc7
Merge pull request #29 from digitalocean/awg/ci
Add basic CI checks using GH actions
2019-06-28 08:10:21 -04:00
Varsha Varadarajan 7b5f5c15d5
Merge pull request #26 from digitalocean/varsha/namespace-check-improvement
Improve default namespace check for secrets: Use upstream constant to exclude default secret sa token from check.
2019-06-28 08:05:21 -04:00
Varsha Varadarajan 6c972785b5 Use upstream constant for all namespaces. 2019-06-28 08:04:16 -04:00
Adam Wolfe Gordon 07a63a4a12 Add basic CI checks using GH actions 2019-06-27 16:47:19 -06:00
Varsha Varadarajan 975a255a50 Improve default namespace check for secrets: Use upstream constant to exclude default secret sa token from check. 2019-06-27 11:12:55 -04:00
Varsha Varadarajan 58006dbae0
Merge pull request #24 from digitalocean/varsha/unused-pv
Unused PV: Check if there are unused persistent volumes in the cluster.
2019-06-27 08:08:04 -04:00
Varsha Varadarajan 3384e0b25d Use long names for k8s object constants 2019-06-27 08:07:35 -04:00
Varsha Varadarajan ae35752083 Unused PV: Check if there are unused persistent volumes in the cluster. 2019-06-26 14:40:25 -04:00
Varsha Varadarajan 4c228b9a01
Merge pull request #23 from digitalocean/varsha/test-refactor
Change desc assertion in all tests, rename variables to conform to convention
2019-06-26 09:26:17 -04:00
Varsha Varadarajan 8bacdc73a0 Change desc assertion in all tests, rename variables to conform to convention 2019-06-26 09:25:07 -04:00
Varsha Varadarajan 8f324cf6d9
Merge pull request #22 from digitalocean/varsha/hostpath-pv
Hostpath check: Checks if there are pods which use hostpath volumes
2019-06-26 09:05:00 -04:00
Varsha Varadarajan d5811380e1 Update checks.md to include hostpath volume check. 2019-06-26 09:04:41 -04:00
Varsha Varadarajan 85fdefe8b1 Show volume name in errors. 2019-06-26 08:43:06 -04:00
Varsha Varadarajan 28e57071f5 Hostpath check: Checks if there are pods which use hostpath volumes 2019-06-26 08:29:06 -04:00
Varsha Varadarajan 99121a2193
Merge pull request #19 from digitalocean/varsha/check-desc
Have checks.md to provide details about each check.
2019-06-26 08:28:33 -04:00
Varsha Varadarajan cc400b2a24 Have checks.md to provide details about each check.
This is especially useful in documenting the reason behind some of the best practices we recommend.
2019-06-26 08:27:47 -04:00
Varsha Varadarajan f0ca2af611
Merge pull request #17 from digitalocean/varsha/diagnostic-struct
Introduce diagnostic struct for structuring check outputs
2019-06-25 14:20:28 -04:00
Varsha Varadarajan 695765302e Add level flag to filter output based on severity: error, warning, or suggestion 2019-06-25 14:19:41 -04:00
Varsha Varadarajan 171ba02f4e Remove TypeMeta from Diagnostic.
* The k8s API does not set TypeMeta on objects when the list API is used
2019-06-25 14:19:20 -04:00
Varsha Varadarajan 4be81f8fca Add cli flag for output format
* Displays json if flag is provided, else display human readable string.
2019-06-25 14:19:20 -04:00
Varsha Varadarajan 65ba22e8d8 Use owner references to indicate the objects that refer to the problematic object.
* Change output format to json
2019-06-25 14:19:20 -04:00
Varsha Varadarajan 0320c5633a Introduce Diagnostic struct to store check output 2019-06-25 09:42:27 -04:00
Varsha Varadarajan 257a14ed25
Merge pull request #20 from digitalocean/varsha/remove-quotas-and-limits
Remove quotas and limits from default-namespace check.
2019-06-25 08:37:02 -04:00