Commit Graph

291 Commits (efbdc716e5a3c654ae94f0bb1da9e88523f0ac45)

Author SHA1 Message Date
Sharmita Das 4ee6d88ce8
Merge pull request #117 from digitalocean/sdas/checks-edits-1
Clusterlint errors edits
2021-05-20 10:00:52 -04:00
Sharmita Das cde6366b70 Edits 2021-05-19 17:21:37 -04:00
Sharmita Das 6598d0c41c
Merge pull request #116 from digitalocean/sdas/webhooks-timeout-seconds
Update Admission Controller Webhook Timeout
2021-04-26 17:05:09 -04:00
sharmita3 3c1e80cb73 Updated timeout seconds 2021-04-26 17:00:04 -04:00
Varsha Varadarajan 9ffee1bec7
Merge pull request #115 from varshavaradarajan/varsha/update-timeout-check-doc
update  the max timeout seconds for the webhook timeout check doc
2021-02-23 08:35:56 -08:00
Varsha Varadarajan 84f4b228ee update the max timeout seconds for the webhook timeout check doc 2021-02-23 08:22:41 -08:00
Adam Wolfe Gordon 715e046e9f
Merge pull request #114 from WyriHaximus-labs/error-on-images-from-docker.pkg.github.com
Error on images from docker.pkg.github.com
2021-02-16 13:56:24 -07:00
Cees-Jan Kiewiet e009c96c73
Error on images from docker.pkg.github.com
Since Kubernetes 1.20 containerd is used instead of Docker as the container runtime.
Containerd is due to protocol version differences/support/mismatch unabled to
pull images hosted at docker.pkg.github.com. The new check in this commit will
error when it finds an image from that registry, and suggests to use ghcr.io,
which is also hosted and operated by GitHub, and the successor of
docker.pkg.github.com.

Refs:
* https://github.com/containerd/containerd/issues/3291#issuecomment-683700425
* https://docs.github.com/en/packages/guides/migrating-to-github-container-registry-for-docker-images#domain-changes
2021-02-12 09:14:46 +01:00
Adam Wolfe Gordon d0520427cd
Merge pull request #112 from digitalocean/awg/k8s-1.20
vendor: Bump Kubernetes dependencies to v0.20.2
2021-02-08 14:40:15 -07:00
Adam Wolfe Gordon 876d506b00 vendor: Bump Kubernetes dependencies to v0.20.2 2021-02-05 11:58:32 -07:00
Varsha Varadarajan 92efb16416
Merge pull request #110 from varshavaradarajan/update-checks-doc
add dobs-pod-owner check to checks.md
2021-01-06 10:07:36 -08:00
Varsha Varadarajan ae6b279dea add dobs-pod-owner check to checks.md 2021-01-05 13:05:21 -08:00
Varsha Varadarajan ed20e47e10
Merge pull request #108 from varshavaradarajan/unused-secret-sa
unused secrets check - check if secret is referenced in service accounts
2021-01-05 12:48:20 -08:00
Varsha Varadarajan ad20fc18c8
Merge pull request #109 from varshavaradarajan/dobs-check
doks - check if pod referencing dobs volumes are owned by a statefulset
2021-01-05 12:42:57 -08:00
Varsha Varadarajan ef03e37686 doks - check if pod referencing dobs volumes are owned by a statefulset 2021-01-05 12:41:28 -08:00
Varsha Varadarajan 37af3b316a
Merge pull request #105 from varshavaradarajan/use-stable-webhook-client
Use admissionregistration/v1 client to fetch webhooks
2021-01-05 12:13:33 -08:00
Varsha Varadarajan 3c3921eadf unused secrets check - check if secret is referenced in service accounts 2020-12-22 10:19:52 -08:00
Varsha Varadarajan 9fb4ad9bc4
Merge pull request #103 from stephenpaulger/envvar-secret-key-ref
Check env vars for secret key references
2020-12-21 14:26:40 -08:00
Stephen Paulger 964b011a20 Add tests for env var secrets in init containers 2020-12-21 21:17:01 +00:00
Varsha Varadarajan 95e7d57b51 Use admissionregistration/v1 client to fetch webhooks
* Do not fetch unused ComponentStatuses
2020-12-21 12:38:18 -08:00
Stephen Paulger b97f94519a Check env vars for secret key references 2020-12-21 11:16:57 +00:00
Varsha Varadarajan a198e0364b
Merge pull request #97 from jasimmons/jasimmons/cronjob-concurrency-check
Add CronJob Concurrency Check
2020-11-09 16:17:20 -08:00
Jason Simmons 8ae5d67a80 Add cronjob-concurrency to checks.md 2020-11-09 14:04:30 -05:00
Varsha Varadarajan ba1db6a6b6
Merge pull request #99 from varshavaradarajan/varsha/webhook-check-update
webhook-replacement: ensure that the webhook rules are applicable to v1, apps/*
2020-11-05 14:22:44 -08:00
Varsha Varadarajan 2edf737cb0 webhook-replacement: ensure that the webhook rules are applicable to v1, apps/* 2020-11-05 14:16:51 -08:00
wayne 840f41b8a5
Merge pull request #98 from digitalocean/wwarren/update-k8s-deps
vendor: update k8s deps to 1.19.3
2020-10-30 08:27:15 -05:00
Wayne Warren d2ecf0fec6 vendor: update k8s deps to 1.19.3 2020-10-29 18:25:28 -05:00
jasimmons 9abf246c1c Add cronJobConcurrencyCheck 2020-10-26 09:32:23 -04:00
jasimmons 0075a30aea Add CronJob as a resource type 2020-10-26 09:32:01 -04:00
Adam Wolfe Gordon 3ab1800043
Merge pull request #90 from uplol/master
Fix reference to loop variables in doks admission controller checks
2020-08-13 14:07:28 -06:00
Spencer 99bb81f367 change approach 2020-08-13 19:52:35 +00:00
Spencer Sharkey 973b3f4c54 Fix reference to loop variables in doks admission controllers 2020-08-13 19:44:15 +00:00
Adam Wolfe Gordon 37326c1fc5
Merge pull request #91 from digitalocean/awg/label-check-stable-output
Make "details" for the label check stable
2020-08-13 13:22:52 -06:00
Adam Wolfe Gordon a1e68fdd59 Make "details" for the label check stable
The tests for #90 failed because the order of map iteration is
non-deterministic, causing custom labels in the node label check to appear in
random order in the diagnostic details. Sort the slice of labels so that the
output is stable.
2020-08-13 13:09:02 -06:00
Varsha Varadarajan 6b6f1ed38a
Merge pull request #89 from varshavaradarajan/clusterlint-panic-recovery
Recover from panic when running checks
2020-07-10 10:44:13 -07:00
Varsha Varadarajan 23208e1872 recover from panic when running checks 2020-07-09 10:42:21 -07:00
Jeremy L. Morris 3555522677
Merge pull request #88 from MorrisLaw/fix-nil-timeout-error
Update timeout check to account for nil TimeoutSeconds value
2020-07-07 12:19:41 -04:00
Jeremy L. Morris 161c7a1a7c Add comment on why we just continue for nil TimeoutSeconds value 2020-07-07 11:06:27 -04:00
Jeremy L. Morris b3915f299d Update timeout check to account for nil TimeoutSeconds value 2020-06-30 17:44:32 -04:00
Varsha Varadarajan c571ab598b
Merge pull request #86 from varshavaradarajan/update-to-1.18
Update k8s dependencies to 0.18.3
2020-06-22 11:08:49 -07:00
Varsha Varadarajan 8de65f1dbb Update circle ci jobs to run on go 1.13 2020-06-22 10:45:05 -07:00
Jeremy L. Morris 65df37b007
Merge pull request #85 from MorrisLaw/add-webhook-check-for-timeout
Add webhook check for timeouts
2020-06-15 13:18:57 -04:00
Varsha Varadarajan 6d9242c943 Update api interactions to pass along context 2020-06-15 09:56:12 -07:00
Varsha Varadarajan 8fbeb3af6a update vendor 2020-06-15 09:55:34 -07:00
Varsha Varadarajan ee3fb78aac Update k8s deps to 0.18.3 2020-06-15 09:55:21 -07:00
Jeremy L. Morris e6ec7b4515 Add webhook check for timeouts
* Update docs to include Admission Controller Webhook Timeout check with fix

 * Update file naming to be more consistent for admission controller webhooks

 * Fix typo in webhook replacement struct name
2020-06-15 12:07:35 -04:00
Varsha Varadarajan ee0ddd9885
Merge pull request #82 from varshavaradarajan/upgrade-dependencies
modules: upgrade dependencies
2020-06-11 11:58:57 -07:00
Varsha Varadarajan a8eb024dcf Update vendor 2020-06-11 11:39:40 -07:00
Varsha Varadarajan ebb738cc25 upgrade k8s.io modules to 0.17.3, upgrade others to latest 2020-06-11 11:39:26 -07:00
Varsha Varadarajan ce3b53339f
Merge pull request #80 from varshavaradarajan/varsha/add-details-to-diagnostics
Add additional details to diagnostics, provide specific labels and taint keys  for nodeLabelsTaints check
2020-05-29 07:35:32 -07:00