popeye

👀 A Kubernetes cluster resource sanitizer

OTHER License

Stars
5K
Committers
71

Bot releases are hidden (Show)

popeye - v0.21.3 Latest Release

Published by derailed 7 months ago

Release v0.21.3

Notes

Thank you to all that contributed with flushing out issues and enhancements for Popeye! I'll try to mark some of these issues as fixed. But if you don't mind grab the latest rev and see if we're happier with some of the fixes! If you've filed an issue please help me verify and close. Your support, kindness and awesome suggestions to make Popeye better is as ever very much noticed and appreciated!

This project offers a GitHub Sponsor button (over here 👆). As you well know this is not pimped out by big corps with deep pockets. If you feel Popeye is saving you cycles diagnosing potential cluster issues please consider sponsoring this project!! It does go a long way in keeping our servers lights on and beers in our fridge.

Also if you dig this tool, please make some noise on social! @kitesurfer


Maintenance Release


Resolved Issues

. #298 Popeye showing errors for Complete cronjobs (with feelings!)


  © 2024 Imhotep Software LLC. All materials licensed under Apache v2.0

popeye - v0.21.2

Published by derailed 7 months ago

Release v0.21.2

Notes

Thank you to all that contributed with flushing out issues and enhancements for Popeye! I'll try to mark some of these issues as fixed. But if you don't mind grab the latest rev and see if we're happier with some of the fixes! If you've filed an issue please help me verify and close. Your support, kindness and awesome suggestions to make Popeye better is as ever very much noticed and appreciated!

This project offers a GitHub Sponsor button (over here 👆). As you well know this is not pimped out by big corps with deep pockets. If you feel Popeye is saving you cycles diagnosing potential cluster issues please consider sponsoring this project!! It does go a long way in keeping our servers lights on and beers in our fridge.

Also if you dig this tool, please make some noise on social! @kitesurfer


Maintenance Release


Resolved Issues

. #298 Popeye showing errors for Complete cronjobs


  © 2024 Imhotep Software LLC. All materials licensed under Apache v2.0

popeye - v0.21.1

Published by derailed 7 months ago

Release v0.21.1

Notes

Thank you to all that contributed with flushing out issues and enhancements for Popeye! I'll try to mark some of these issues as fixed. But if you don't mind grab the latest rev and see if we're happier with some of the fixes! If you've filed an issue please help me verify and close. Your support, kindness and awesome suggestions to make Popeye better is as ever very much noticed and appreciated!

This project offers a GitHub Sponsor button (over here 👆). As you well know this is not pimped out by big corps with deep pockets. If you feel Popeye is saving you cycles diagnosing potential cluster issues please consider sponsoring this project!! It does go a long way in keeping our servers lights on and beers in our fridge.

Also if you dig this tool, please make some noise on social! @kitesurfer


Maintenance Release


Resolved Issues

. #296 False positive: Single endpoint is associated with this service


  © 2024 Imhotep Software LLC. All materials licensed under Apache v2.0

popeye - v0.21.0

Published by derailed 7 months ago

Release v0.21.0

Notes

Thank you to all that contributed with flushing out issues and enhancements for Popeye! I'll try to mark some of these issues as fixed. But if you don't mind grab the latest rev and see if we're happier with some of the fixes! If you've filed an issue please help me verify and close. Your support, kindness and awesome suggestions to make Popeye better is as ever very much noticed and appreciated!

This project offers a GitHub Sponsor button (over here 👆). As you well know this is not pimped out by big corps with deep pockets. If you feel Popeye is saving you cycles diagnosing potential cluster issues please consider sponsoring this project!! It does go a long way in keeping our servers lights on and beers in our fridge.

Also if you dig this tool, please make some noise on social! @kitesurfer


Maintenance Release


Resolved Issues

. #293 Spinach documentation
. #263 Fix automated action to push releases to krew


Contributed PRs

Please give Big Thanks! and ATTA Girls/Boys! to all the fine contributors for making Popeye better for all of us!!


  © 2024 Imhotep Software LLC. All materials licensed under Apache v2.0

popeye - v0.20.5

Published by derailed 8 months ago

Release v0.20.5

Notes

Thank you to all that contributed with flushing out issues and enhancements for Popeye! I'll try to mark some of these issues as fixed. But if you don't mind grab the latest rev and see if we're happier with some of the fixes! If you've filed an issue please help me verify and close. Your support, kindness and awesome suggestions to make Popeye better is as ever very much noticed and appreciated!

This project offers a GitHub Sponsor button (over here 👆). As you well know this is not pimped out by big corps with deep pockets. If you feel Popeye is saving you cycles diagnosing potential cluster issues please consider sponsoring this project!! It does go a long way in keeping our servers lights on and beers in our fridge.

Also if you dig this tool, please make some noise on social! @kitesurfer


Maintenance Release


Resolved Issues

. #290 Secrets is not scanned on Openshift 4.12 bug
. #289 "No associated endpoint" (POP-1105) reported for service question
. #288 A Score granted despite no resources being scanned


  © 2024 Imhotep Software LLC. All materials licensed under Apache v2.0

popeye - v0.20.4

Published by derailed 8 months ago

Release v0.20.4

Notes

Thank you to all that contributed with flushing out issues and enhancements for Popeye! I'll try to mark some of these issues as fixed. But if you don't mind grab the latest rev and see if we're happier with some of the fixes! If you've filed an issue please help me verify and close. Your support, kindness and awesome suggestions to make Popeye better is as ever very much noticed and appreciated!

This project offers a GitHub Sponsor button (over here 👆). As you well know this is not pimped out by big corps with deep pockets. If you feel Popeye is saving you cycles diagnosing potential cluster issues please consider sponsoring this project!! It does go a long way in keeping our servers lights on and beers in our fridge.

Also if you dig this tool, please make some noise on social! @kitesurfer


Maintenance Release


Resolved Issues

. #286 Boom! runtime error: invalid memory address or nil pointer dereference (see logs)


  © 2024 Imhotep Software LLC. All materials licensed under Apache v2.0

popeye - v0.20.3

Published by derailed 8 months ago

Release v0.20.3

Notes

Thank you to all that contributed with flushing out issues and enhancements for Popeye! I'll try to mark some of these issues as fixed. But if you don't mind grab the latest rev and see if we're happier with some of the fixes! If you've filed an issue please help me verify and close. Your support, kindness and awesome suggestions to make Popeye better is as ever very much noticed and appreciated!

This project offers a GitHub Sponsor button (over here 👆). As you well know this is not pimped out by big corps with deep pockets. If you feel Popeye is saving you cycles diagnosing potential cluster issues please consider sponsoring this project!! It does go a long way in keeping our servers lights on and beers in our fridge.

Also if you dig this tool, please make some noise on social! @kitesurfer


Maintenance Release


Resolved Issues

. #284 Db get failed for ""


  © 2024 Imhotep Software LLC. All materials licensed under Apache v2.0

popeye - v0.20.2

Published by derailed 8 months ago

Release v0.20.2

Notes

Thank you to all that contributed with flushing out issues and enhancements for Popeye! I'll try to mark some of these issues as fixed. But if you don't mind grab the latest rev and see if we're happier with some of the fixes! If you've filed an issue please help me verify and close. Your support, kindness and awesome suggestions to make Popeye better is as ever very much noticed and appreciated!

This project offers a GitHub Sponsor button (over here 👆). As you well know this is not pimped out by big corps with deep pockets. If you feel Popeye is saving you cycles diagnosing potential cluster issues please consider sponsoring this project!! It does go a long way in keeping our servers lights on and beers in our fridge.

Also if you dig this tool, please make some noise on social! @kitesurfer


Maintenance Release


Resolved Issues

. #280 No RunInfo in context


  © 2024 Imhotep Software LLC. All materials licensed under Apache v2.0

popeye - v0.20.1

Published by derailed 8 months ago

Release v0.20.1

Notes

Thank you to all that contributed with flushing out issues and enhancements for Popeye! I'll try to mark some of these issues as fixed. But if you don't mind grab the latest rev and see if we're happier with some of the fixes! If you've filed an issue please help me verify and close. Your support, kindness and awesome suggestions to make Popeye better is as ever very much noticed and appreciated!

This project offers a GitHub Sponsor button (over here 👆). As you well know this is not pimped out by big corps with deep pockets. If you feel Popeye is saving you cycles diagnosing potential cluster issues please consider sponsoring this project!! It does go a long way in keeping our servers lights on and beers in our fridge.

Also if you dig this tool, please make some noise on social! @kitesurfer


Patch Release


  © 2024 Imhotep Software LLC. All materials licensed under Apache v2.0

popeye - v0.20.0

Published by derailed 8 months ago

Release v0.20.0

Notes

Thank you to all that contributed with flushing out issues and enhancements for Popeye! I'll try to mark some of these issues as fixed. But if you don't mind grab the latest rev and see if we're happier with some of the fixes! If you've filed an issue please help me verify and close. Your support, kindness and awesome suggestions to make Popeye better is as ever very much noticed and appreciated!

This project offers a GitHub Sponsor button (over here 👆). As you well know this is not pimped out by big corps with deep pockets. If you feel Popeye is saving you cycles diagnosing potential cluster issues please consider sponsoring this project!! It does go a long way in keeping our servers lights on and beers in our fridge.

Also if you dig this tool, please make some noise on social! @kitesurfer


♫ Sounds Behind The Release ♭

🏹💕 Happy belated Valentines 💕🏹


🎉 Feature Release 🥳

Popeye just got a new spinach formula and pipe!

😳 This is a big one! 😳

NOTE! 🫣 Paint is still fresh on this deal and I might have broken stuff in the process ;(
Please help vet this drop so we can solidify and make Popeye better for all of us!
Thank you!!

Splendid! So what changed?

Biffs'em If You Got'em!

As of this drop, Popeye linters family got extended. The following linters were added/extended:

  • Cronjobs
  • Jobs
  • Gateway-Classes
  • Gateways
  • HTTPRoutes
  • NetworkPolicies (Beefed up!)

New Spinach Formula!

The SpinachYAML configuration changed and won't be compatible with previous versions.
The new format provides for global exclusions and linters specific ones.
Please see the docs for the gory details but in short this is what a spinach file now looks like:

popeye:
  allocations:
    cpu:
      underPercUtilization: 200
      overPercUtilization: 50
    memory:
      underPercUtilization: 200
      overPercUtilization: 50

  # [!!NEW!!] Specify global exclusions for fqn, codes, labels, annotations
  excludes:
    global:
      # Exclude kube-system ns for all linters.
      fqns: [rx:^kube-system]
      # Exclude these workload labels for all linters.
      labels:
        app: [blee, bozo]

    # [!!NEW!!] Linters exclude section
    linters:
      # [!!NEW!!] use the R from GVR resource specification to name the linter
      statefulsets:
        # [!!NEW!!] Exclude codes via regexp ie skip 101, 1000,...
        codes: ["rx:^10"]
        instances:
          # Skip scan for a particular FQN aka namespace/res-name
          - fqns: [default/prom-alertmanager]
            codes: [106]

      pods:
        codes: ["306", "rx:^11"]
        instances:
          - fqns: [rx:^default/prom]
          - fqns: [rx:^default/graf]
          # [!!NEW!!] Skip using either labels or annotations and/or specific codes
          - labels:
              app: [blee, blah, zorg]
            codes: [300]
          - fqns: [rx:^default/pappi]
            codes: [300, 102, 306]
            containers: [c1]

  resources:
    node:
      limits:
        cpu: 90
        memory: 80
    pod:
      limits:
        cpu: 80
        memory: 75
      restarts: 3

  overrides:
    - code: 1502
      severity: 3

  registries:
    - quay2.io
    - docker1.io

Popeye The Prom Queen?

Additionally, we've updated Popeye's prometheus metrics to provide more scan insights and signals. Please see the docs for details.

. popeye_severity_total [gauge] tracks various counts based on severity.
. popeye_code_total [gauge] tracks counts by Popeye's linter codes.
. popeye_linter_tally_total [gauge] tracks counts per linters.
. popeye_report_errors_total [gauge] tracks scan errors totals.
. popeye_cluster_score [gauge] tracks scan report scores.


Resolved Issues

. #265 additional/fine grained prometheus metrics
. #237 Support multiple outputs at once
. #235 --lint level does not affect html output
. #232 Metrics get overridden when using the same Pushgateway for multiple k8s clusters
. #231 wrong warning: [POP-107] No resource limits defined
. #230 APIs: metrics.k8s.io/v1beta1: the server is currently unable to handle the request
. #214 [POP-1100] No pods match service selector - should not be detected for ExternalName service type
. #213 Ingress extensions/v1beta1 deprecated (and deleted in k8s v1.22) is not detected ONLY in kube-metriques namespace
. #212 Ingress networking.k8s.io/v1beta1 deprecated since k8s v1.19 and deleted in k8s v1.22, is not detected ONLY in specific namespace name as kube-metriques
. #209 POP-403 - PodSecurityPolicy (PSP) k8s v1.21 deprecation - k8s v1.25 deletion - not detected
. #202 False positive on NetworkPolicy using a catch all namespaceSelector
. #163 popeye 0.9.0 with K8S 1.21.0 bug on PodDisruptionBudget - Wrong default API
. #125 info/error/warning messages to the metrics sent to prometheus
. #97 Add support for explicitly sanitizing jobs to popeye
. #59 StatefulSet incorrectly determines apiVersio


  © 2024 Imhotep Software LLC. All materials licensed under Apache v2.0

popeye - v0.11.3

Published by derailed 9 months ago

Release v0.11.3

Notes

Thank you to all that contributed with flushing out issues and enhancements for Popeye! I'll try to mark some of these issues as fixed. But if you don't mind grab the latest rev and see if we're happier with some of the fixes! If you've filed an issue please help me verify and close. Your support, kindness and awesome suggestions to make Popeye better is as ever very much noticed and appreciated!

This project offers a GitHub Sponsor button (over here 👆). As you well know this is not pimped out by big corps with deep pockets. If you feel Popeye is saving you cycles diagnosing potential cluster issues please consider sponsoring this project!! It does go a long way in keeping our servers lights on and beers in our fridge.

Also if you dig this tool, please make some noise on social! @kitesurfer


Maintenance Release!

Fix docker build issues


  © 2023 Imhotep Software LLC. All materials licensed under Apache v2.0

popeye - v0.11.2

Published by derailed 10 months ago

Release v0.11.2

Notes

Thank you to all that contributed with flushing out issues and enhancements for Popeye! I'll try to mark some of these issues as fixed. But if you don't mind grab the latest rev and see if we're happier with some of the fixes! If you've filed an issue please help me verify and close. Your support, kindness and awesome suggestions to make Popeye better is as ever very much noticed and appreciated!

This project offers a GitHub Sponsor button (over here 👆). As you well know this is not pimped out by big corps with deep pockets. If you feel Popeye is saving you cycles diagnosing potential cluster issues please consider sponsoring this project!! It does go a long way in keeping our servers lights on and beers in our fridge.

Also if you dig this tool, please make some noise on social! @kitesurfer


Maintenance Release!


Resolved Issues

  • #259 Checking Kubernetes clusters fails because v1/PodSecurityPolicy is checked
  • #229 Timestamp on the report

  © 2023 Imhotep Software LLC. All materials licensed under Apache v2.0

popeye - v0.11.1

Published by derailed over 1 year ago

Release v0.11.1

Notes

Thank you to all that contributed with flushing out issues and enhancements for Popeye! I'll try to mark some of these issues as fixed. But if you don't mind grab the latest rev and see if we're happier with some of the fixes! If you've filed an issue please help me verify and close. Your support, kindness and awesome suggestions to make Popeye better is as ever very much noticed and appreciated!

This project offers a GitHub Sponsor button (over here 👆). As you well know this is not pimped out by big corps with deep pockets. If you feel Popeye is saving you cycles diagnosing potential cluster issues please consider sponsoring this project!! It does go a long way in keeping our servers lights on and beers in our fridge.

Also if you dig this tool, please make some noise on social! @kitesurfer


Maintenance Release!


Resolved Issues

  • Issue #245 Checking Kubernetes clusters fails because v1/PodSecurityPolicy is checked

Contributed Issues

Please give Big Thanks! and ATTA Girls/Boys! to all the fine contributors for making Popeye better for all of us!!

  • PR #247 Fix deprecated cronjob api

  © 2023 Imhotep Software LLC. All materials licensed under Apache v2.0

popeye - v0.11.0

Published by derailed over 1 year ago

Release v0.11.0

Notes

Thank you to all that contributed with flushing out issues and enhancements for Popeye! I'll try to mark some of these issues as fixed. But if you don't mind grab the latest rev and see if we're happier with some of the fixes! If you've filed an issue please help me verify and close. Your support, kindness and awesome suggestions to make Popeye better is as ever very much noticed and appreciated!

This project offers a GitHub Sponsor button (over here 👆). As you well know this is not pimped out by big corps with deep pockets. If you feel Popeye is saving you cycles diagnosing potential cluster issues please consider sponsoring this project!! It does go a long way in keeping our servers lights on and beers in our fridge.

Also if you dig this tool, please make some noise on social! @kitesurfer


Maintenance Release!


Contributed PRs

Please give Big Thanks! and ATTA Girls/Boys! to all the fine contributors for making K9s better for all of us!!

  • PR #243 Invalid value for --force-exit-zero
  • PR #241 Add a non-root user in docker image
  • PR #240 Optimize README documents
  • PR #238 Add arm64 Darwin releases to krew-index
  • PR #233 Add go install option to readme
  • PR #226 Fixing CVE issue for client_golang 1.11.0 to 1.12.2
  • PR #224 Add check for pods that are managed by multiple pdbs
  • PR #222 Fix RBAC rules in README.md

  © 2023 Imhotep Software LLC. All materials licensed under Apache v2.0

popeye - v0.10.1

Published by derailed over 2 years ago

Release v0.10.1

Notes

Thank you to all that contributed with flushing out issues and enhancements for Popeye! I'll try to mark some of these issues as fixed. But if you don't mind grab the latest rev and see if we're happier with some of the fixes! If you've filed an issue please help me verify and close. Your support, kindness and awesome suggestions to make Popeye better is as ever very much noticed and appreciated!

This project offers a GitHub Sponsor button (over here 👆). As you well know this is not pimped out by big corps with deep pockets. If you feel Popeye is saving you cycles diagnosing potential cluster issues please consider sponsoring this project!! It does go a long way in keeping our servers lights on and beers in our fridge.

Also if you dig this tool, please make some noise on social! @kitesurfer


Maintenance Release!

Fix issue with pod disruption budget appearing twice


  © 2022 Imhotep Software LLC. All materials licensed under Apache v2.0

popeye - v0.10.0

Published by derailed over 2 years ago

Release v0.10.0

Notes

Thank you to all that contributed with flushing out issues and enhancements for Popeye! I'll try to mark some of these issues as fixed. But if you don't mind grab the latest rev and see if we're happier with some of the fixes! If you've filed an issue please help me verify and close. Your support, kindness and awesome suggestions to make Popeye better is as ever very much noticed and appreciated!

This project offers a GitHub Sponsor button (over here 👆). As you well know this is not pimped out by big corps with deep pockets. If you feel Popeye is saving you cycles diagnosing potential cluster issues please consider sponsoring this project!! It does go a long way in keeping our servers lights on and beers in our fridge.

Also if you dig this tool, please make some noise on social! @kitesurfer


Maintenance Release!

Updated to the latest K8s API versions.

Release Heroes

Please make sure to give a big Thanks! and ATTA Girl/Boy! to the following good folks for improving and supporting Popeye:

Resolved Bugs/PRs

  • PR #220 Fix HPA API version
  • PR #219 Add S3 compatible storage
  • PR #218 Add gitpod integration
  • PR #217 Fix #211. Deprecated ingress version
  • PR #215 Update autoscaling resource version
  • PR #205 Documentation clarification
  • PR #179 Rule to check a list of allowed registries

  © 2022 Imhotep Software LLC. All materials licensed under Apache v2.0

popeye - v0.9.8

Published by derailed almost 3 years ago

Release v0.9.8

Notes

Thank you to all that contributed with flushing out issues and enhancements for Popeye! I'll try to mark some of these issues as fixed. But if you don't mind grab the latest rev and see if we're happier with some of the fixes! If you've filed an issue please help me verify and close. Your support, kindness and awesome suggestions to make Popeye better is as ever very much noticed and appreciated!

This project offers a GitHub Sponsor button (over here 👆). As you well know this is not pimped out by big corps with deep pockets. If you feel Popeye is saving you cycles diagnosing potential cluster issues please consider sponsoring this project!! It does go a long way in keeping our servers lights on and beers in our fridge.

Also if you dig this tool, please make some noise on social! @kitesurfer


Maintenance Release!

NOTE: Fix'n brew deprecation warnings

Resolved Bugs/PRs


  © 2020 Imhotep Software LLC. All materials licensed under Apache v2.0

popeye - v0.9.7

Published by derailed over 3 years ago

Release v0.9.7

Notes

Thank you to all that contributed with flushing out issues and enhancements for Popeye! I'll try to mark some of these issues as fixed. But if you don't mind grab the latest rev and see if we're happier with some of the fixes! If you've filed an issue please help me verify and close. Your support, kindness and awesome suggestions to make Popeye better is as ever very much noticed and appreciated!

This project offers a GitHub Sponsor button (over here 👆). As you well know this is not pimped out by big corps with deep pockets. If you feel Popeye is saving you cycles diagnosing potential cluster issues please consider sponsoring this project!! It does go a long way in keeping our servers lights on and beers in our fridge.

Also if you dig this tool, please make some noise on social! @kitesurfer


Maintenance Release!

NOTE: On this drop Popeye's docker image has been relocated to DockerHub!

Resolved Bugs/PRs

  • Issue #190 Popeye docker image tag 0.9.6 not available on quay.io
  • Issue #163 popeye 0.9.0 with K8S 1.21.0 bug on PodDisruptionBudget - Wrong default API. With Feelings!

  © 2020 Imhotep Software LLC. All materials licensed under Apache v2.0

popeye - v0.9.6

Published by derailed over 3 years ago

Release v0.9.6

Notes

Thank you to all that contributed with flushing out issues and enhancements for Popeye! I'll try to mark some of these issues as fixed. But if you don't mind grab the latest rev and see if we're happier with some of the fixes! If you've filed an issue please help me verify and close. Your support, kindness and awesome suggestions to make Popeye better is as ever very much noticed and appreciated!

This project offers a GitHub Sponsor button (over here 👆). As you well know this is not pimped out by big corps with deep pockets. If you feel Popeye is saving you cycles diagnosing potential cluster issues please consider sponsoring this project!! It does go a long way in keeping our servers lights on and beers in our fridge.

Also if you dig this tool, please make some noise on social! @kitesurfer


Maintenance Release!


Resolved Bugs/PRs

  • Issue #188 Can't run Popeye: No resource meta found for networking.k8s.io/v1/ingresses. With Feelings!
  • Issue #178 Custom handling of client-go/rest warnings. Sending to logger instead

  © 2020 Imhotep Software LLC. All materials licensed under Apache v2.0

popeye - v0.9.5

Published by derailed over 3 years ago

Release v0.9.5

Notes

Thank you to all that contributed with flushing out issues and enhancements for Popeye! I'll try to mark some of these issues as fixed. But if you don't mind grab the latest rev and see if we're happier with some of the fixes! If you've filed an issue please help me verify and close. Your support, kindness and awesome suggestions to make Popeye better is as ever very much noticed and appreciated!

This project offers a GitHub Sponsor button (over here 👆). As you well know this is not pimped out by big corps with deep pockets. If you feel Popeye is saving you cycles diagnosing potential cluster issues please consider sponsoring this project!! It does go a long way in keeping our servers lights on and beers in our fridge.

Also if you dig this tool, please make some noise on social! @kitesurfer


Maintenance Release!


Resolved Bugs/PRs

  • Issue #163 popeye 0.9.0 with K8S 1.21.0 bug on PodDisruptionBudget - Wrong default API - With Feelings!

  © 2020 Imhotep Software LLC. All materials licensed under Apache v2.0