derailed/popeye
Popeye
👀 A Kubernetes cluster resource sanitizer
Features
- Cluster Sanitizers - Scans live Kubernetes clusters for misconfigurations, stale resources, and best practice violations.
- Live Cluster Security Scanners - Inspects a running Kubernetes cluster and reports misconfigurations without altering resources.
- Cluster Audit Schedulers - Runs automated cluster health checks on a recurring schedule using Kubernetes CronJobs.
- Cluster - Deploys a scanner as a Kubernetes CronJob to perform scheduled cluster scans automatically.
- Cluster Audit Schedulers - Ships a CronJob-based scheduler that runs automated cluster audits on a recurring schedule.
- Kubernetes Resource Health Auditors - Audits Kubernetes resource health and flags unused or problematic states across namespaces.
- Kubernetes Resource Health Audits - Checks each Kubernetes resource for stale, unused, or problematic states and flags them for review.
- Kubernetes Resource Linters - Provides a linter that scans Kubernetes resources against configurable rules and reports violations.
- Kubernetes Resource Linters - Checks Kubernetes resource types for port mismatches, dead references, and missing probes.
- Resource Linters - Checks Kubernetes resource types for port mismatches, dead references, and missing probes.
- Audit Report Generators - Generates audit reports in multiple formats including YAML, HTML, JSON, JUnit, and Prometheus.
- Kubernetes Stale Resource Detectors - Identifies unused or orphaned Kubernetes resources that can be safely removed.
- Infrastructure Capacity Risk Assessments - Evaluates resource usage and flags potential capacity issues such as over-provisioning or under-provisioning.
- Lint Report Exports - Generates lint reports in standard, YAML, HTML, JSON, JUnit, Prometheus, or single score formats for downstream consumption.
- Kubernetes Linter Configuration Files - Tunes linter behavior, sets thresholds, and excludes resources via a YAML configuration file.
- Resource and Code Exclusions - Configures a YAML file to skip specific resources or linter codes using exact names or regular expressions.
- Resource Utilization Analyzers - Reports CPU and memory usage from a metric-server to warn about over or under allocation.
- Prometheus-Based Metric Exporters - Publishes cluster scan results as Prometheus metrics to a pushgateway for monitoring and alerting.
- Prometheus Monitoring Practices - Sends cluster scan results as Prometheus metrics to a pushgateway for monitoring and alerting.
- Kubernetes Resource Utilization Reports - Analyzes CPU and memory usage from a metric-server to warn about over or under allocation and potential capacity issues.
- Kubernetes Resource Utilization Analyzers - Analyzes CPU and memory usage from a metric-server to flag over or under allocation.
- Linter Configuration Files - Controls which linters run, their thresholds, and exclusion rules through a declarative YAML file.
- Monitoring and Visualization - Scans clusters to report configuration and resource issues.
