Popeye Scan Report

CILIUMCLUSTERWIDENETWORKPOLICIES (0 SCANNED)

0 0 0 0 100%

CILIUMENDPOINTS (57 SCANNED)

1 0 0 56 98%

bcdc/bcdc-back-5498fc5fc8-n2z7d
- [POP-1703] Pod owner is not in a running state: bcdc/bcdc-back-5498fc5fc8-n2z7d (CrashLoopBackOff)

CILIUMIDENTITIES (70 SCANNED)

0 14 0 56 80%

bcdc/12259
- [POP-1600] Stale? unable to locate matching Cilium Endpoint
gitlab/17585
- [POP-1600] Stale? unable to locate matching Cilium Endpoint
gitlab/1781
- [POP-1600] Stale? unable to locate matching Cilium Endpoint
gitlab/2559
- [POP-1600] Stale? unable to locate matching Cilium Endpoint
gitlab/36833
- [POP-1600] Stale? unable to locate matching Cilium Endpoint
gitlab/6795
- [POP-1600] Stale? unable to locate matching Cilium Endpoint
gitlab/6917
- [POP-1600] Stale? unable to locate matching Cilium Endpoint
monitoring/38978
- [POP-1600] Stale? unable to locate matching Cilium Endpoint
monitoring/45371
- [POP-1600] Stale? unable to locate matching Cilium Endpoint
monitoring/48588
- [POP-1600] Stale? unable to locate matching Cilium Endpoint
pilotage/14226
- [POP-1600] Stale? unable to locate matching Cilium Endpoint
pilotage/6084
- [POP-1600] Stale? unable to locate matching Cilium Endpoint
share/2807
- [POP-1600] Stale? unable to locate matching Cilium Endpoint
share/61278
- [POP-1600] Stale? unable to locate matching Cilium Endpoint

CILIUMNETWORKPOLICIES (0 SCANNED)

0 0 0 0 100%

CLUSTERS (1 SCANNED)

0 0 0 1 100%

Version
- [POP-406] K8s version OK

CLUSTERROLES (106 SCANNED)

0 0 5 101 100%

cert-manager-cluster-view
- [POP-400] Used? Unable to locate resource reference
cnpg-cloudnative-pg-edit
- [POP-400] Used? Unable to locate resource reference
cnpg-cloudnative-pg-view
- [POP-400] Used? Unable to locate resource reference
external-secrets-servicebindings
- [POP-400] Used? Unable to locate resource reference
velero-ui
- [POP-400] Used? Unable to locate resource reference

CLUSTERROLEBINDINGS (88 SCANNED)

0 4 0 84 95%

system:controller:route-controller
- [POP-1300] References a ServiceAccount (kube-system/route-controller) which does not exist
system:controller:selinux-warning-controller
- [POP-1300] References a ServiceAccount (kube-system/selinux-warning-controller) which does not exist
system:controller:service-controller
- [POP-1300] References a ServiceAccount (kube-system/service-controller) which does not exist
system:kube-dns
- [POP-1300] References a ServiceAccount (kube-system/kube-dns) which does not exist

CONFIGMAPS (78 SCANNED)

0 0 22 56 100%

bcdc/cnpg-default-monitoring
- [POP-400] Used? Unable to locate resource reference
botkube/botkube-system
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-certmanager-issuer-certmanager
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-gitlab-chart-info
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-gitlab-upgrade-check
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-migrations
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-minio-config-cm
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-nginx-ingress-tcp
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-webservice-tests
- [POP-400] Used? Unable to locate resource reference
kube-system/cluster-autoscaler-status
- [POP-400] Used? Unable to locate resource reference
kube-system/extension-apiserver-authentication
- [POP-400] Used? Unable to locate resource reference
kube-system/kube-apiserver-legacy-service-account-token-tracking
- [POP-400] Used? Unable to locate resource reference
kube-system/kube-proxy
- [POP-400] Used? Unable to locate resource reference
outils/cnpg-default-monitoring
- [POP-400] Used? Unable to locate resource reference
pilotage/cnpg-default-monitoring
- [POP-400] Used? Unable to locate resource reference
val-system/cnpg-controller-manager-config
- [POP-400] Used? Unable to locate resource reference
val-system/cnpg-default-monitoring
- [POP-400] Used? Unable to locate resource reference
val-system/nginx-ingress-controller-ingress-nginx-controller
- [POP-400] Used? Unable to locate resource reference
val-system/nginx-ingress-controller-ingress-nginx-tcp
- [POP-400] Used? Unable to locate resource reference
velero/ingress-host-modifier
- [POP-400] Used? Unable to locate resource reference
velero/velero-repo-maintenance
- [POP-400] Used? Unable to locate resource reference
velero/velero-ui
- [POP-400] Used? Unable to locate resource reference

CRONJOBS (6 SCANNED)

0 4 1 1 33%

bcdc/bcdc
- [POP-1501] No active jobs detected
- bcdc
gitlab/gitlab-toolbox-backup
- [POP-1501] No active jobs detected
- certificates
- configure
- toolbox-backup
kube-system/hubble-generate-certs
- [POP-1501] No active jobs detected
- certgen
pilotage/pilotage-etl
- [POP-1501] No active jobs detected
share/share-purge
- [POP-1501] No active jobs detected
- purge

DAEMONSETS (5 SCANNED)

1 4 0 0 0%

kube-system/cilium
- [POP-505] At current load, Memory under allocated. Current:940Mi vs Requested:440Mi (213.64%)
- apply-sysctl-overwrites
- cilium-agent
- clean-cilium-state
- config
- install-cni-binaries
- mount-bpf-fs
- mount-cgroup
kube-system/csi-node
- csi-node-driver-registrar
- csi-plugin
kube-system/konnectivity-agent
- konnectivity-agent
kube-system/kube-proxy
- [POP-508] No pods match controller selector: app=kube-proxy
- kube-proxy
monitoring/alloy
- [POP-503] At current load, CPU under allocated. Current:67m vs Requested:20m (335.00%)
- [POP-505] At current load, Memory under allocated. Current:501Mi vs Requested:100Mi (501.00%)
- alloy
- config-reloader

DEPLOYMENTS (46 SCANNED)

2 35 2 7 19%

bcdc/bcdc-back
- [POP-501] Unhealthy 1 desired but have 0 available
- bcdc-back
bcdc/bcdc-front
- bcdc-front
bcdc/bcdc-superset
- superset
- wait-for-postgres
bcdc/bcdc-superset-worker
- superset
- wait-for-postgres-redis
botkube/botkube
- botkube
gitlab/gitlab-gitlab-exporter
- certificates
- configure
- gitlab-exporter
gitlab/gitlab-gitlab-pages
- certificates
- configure
- gitlab-pages
gitlab/gitlab-gitlab-runner
- gitlab-gitlab-runner
gitlab/gitlab-gitlab-shell
- [POP-505] At current load, Memory under allocated. Current:11Mi vs Requested:5Mi (220.00%)
- certificates
- configure
- gitlab-shell
gitlab/gitlab-sidekiq-all-in-1-v2
- certificates
- configure
- dependencies
gitlab/gitlab-toolbox
- certificates
- configure
- toolbox
gitlab/gitlab-webservice-default
- certificates
- configure
- dependencies
- gitlab-workhorse
kube-system/cilium-operator
- cilium-operator
kube-system/metrics-server
- metrics-server
monitoring/oauth2-proxy
- oauth2-proxy
monitoring/popeye-nginx
- nginx
outils/glpi
- wait-for-db
pilotage/pilotage-superset
- wait-for-postgres
pilotage/pilotage-superset-worker
- superset
- wait-for-postgres-redis
share/share
- migrate
- share
streamlit/streamlit
- [POP-500] Zero scale detected
- [POP-508] No pods match controller selector: app.kubernetes.io/instance=streamlit,app.kubernetes.io/name=streamlit
val-system/cert-manager
- cert-manager-controller
val-system/cert-manager-cainjector
- cert-manager-cainjector
val-system/cert-manager-webhook
- cert-manager-webhook
val-system/cnpg-cloudnative-pg
- manager
val-system/external-secrets
- external-secrets
val-system/external-secrets-cert-controller
- cert-controller
val-system/external-secrets-webhook
- webhook
val-system/nginx-ingress-controller-ingress-nginx-controller
- controller
val-system/scaleway-certmanager-webhook
- scaleway-certmanager-webhook
val-system/traefik
- traefik
valeuriad-wordpress/valeuriad-wordpress-app
- copy-wp-files
- nginx
- php-fpm
- wait-for-db
valeuriad-wordpress/valeuriad-wordpress-mariadb
- mariadb
valeuriad-wordpress/valeuriad-wordpress-redis
- redis
velero/velero
- velero
- velero-plugin-for-aws
velero/velero-ui
- velero-ui
whoz-sync-middleware/redis-explorer
- redis-commander
whoz-sync-middleware/whoz-sync-middleware-app
- [POP-505] At current load, Memory under allocated. Current:324Mi vs Requested:128Mi (253.12%)
- app
- db-explorer
- migrations
whoz-sync-middleware/whoz-sync-middleware-redis
- init-redis
- redis

GATEWAYS (0 SCANNED)

0 0 0 0 100%

GATEWAYCLASSES (0 SCANNED)

0 0 0 0 100%

HORIZONTALPODAUTOSCALERS (5 SCANNED)

0 2 0 3 60%

HPA
- [POP-605] If ALL HPAs triggered, 13381Mi will match/exceed cluster memory(7152Mi) capacity by 6228Mi
gitlab/gitlab-webservice-default
- [POP-603] Replicas (1/4) at burst will match/exceed cluster memory(7152Mi) capacity by 858Mi

HTTPROUTES (0 SCANNED)

0 0 0 0 100%

INGRESSES (17 SCANNED)

2 0 10 5 88%

bcdc/bcdc
- [POP-1403] Ingress backend uses a port#, prefer a named port: 80
- [POP-1403] Ingress backend uses a port#, prefer a named port: 80
bcdc/bcdc-phoenix
- [POP-1403] Ingress backend uses a port#, prefer a named port: 443
gitlab/gitlab-gitlab-pages
- [POP-1403] Ingress backend uses a port#, prefer a named port: 8090
gitlab/gitlab-webservice-default
- [POP-1403] Ingress backend uses a port#, prefer a named port: 8181
monitoring/oauth2-proxy
- [POP-1403] Ingress backend uses a port#, prefer a named port: 80
monitoring/popeye-report
- [POP-1403] Ingress backend uses a port#, prefer a named port: 80
n8n/n8n
- [POP-1403] Ingress backend uses a port#, prefer a named port: 5678
outils/outils-wiki
- [POP-1403] Ingress backend uses a port#, prefer a named port: 80
share/share
- [POP-1403] Ingress backend uses a port#, prefer a named port: 3000
streamlit/streamlit
- [POP-1402] Ingress references a service port which is not defined: :8501
- [POP-1403] Ingress backend uses a port#, prefer a named port: 8501
trombinoscope/trombinoscope
- [POP-1402] Ingress references a service port which is not defined: :5000
- [POP-1403] Ingress backend uses a port#, prefer a named port: 5000
velero/velero-ui
- [POP-1403] Ingress backend uses a port#, prefer a named port: 3000

JOBS (30 SCANNED)

0 18 0 12 40%

bcdc/bcdc-superset-init-db
- superset-init-db
- wait-for-postgres
gitlab/gitlab-migrations-3a920a5
- certificates
- configure
- migrations
gitlab/gitlab-migrations-3eed7f9
- certificates
- configure
- migrations
gitlab/gitlab-migrations-4c19501
- certificates
- configure
- migrations
gitlab/gitlab-migrations-603b6ef
- certificates
- configure
- migrations
gitlab/gitlab-migrations-7a25980
- certificates
- configure
- migrations
gitlab/gitlab-migrations-a649578
- certificates
- configure
- migrations
gitlab/gitlab-toolbox-backup-29723760
- certificates
- configure
- toolbox-backup
gitlab/gitlab-toolbox-backup-29728080
- certificates
- configure
- toolbox-backup
gitlab/gitlab-toolbox-backup-29729520
- certificates
- configure
- toolbox-backup
gitlab/gitlab-toolbox-backup-29730960
- certificates
- configure
- toolbox-backup
pilotage/pilotage-etl-29732040
- [POP-1503] Warning found: Job has reached the specified backoff limit
share/share-purge-29697300
- purge
share/share-purge-29698740
- purge
share/share-purge-29703060
- purge
share/share-purge-29727540
- purge
share/share-purge-29728980
- purge
share/share-purge-29731860
- purge

NAMESPACES (21 SCANNED)

0 0 0 21 100%

NETWORKPOLICIES (5 SCANNED)

0 0 0 5 100%

NODES (4 SCANNED)

0 2 0 2 50%

scw-tf-k8s-crit-tf-pool-noshutdown-fr-p-61e92f
- [POP-710] Memory threshold (80%) reached 102%
scw-tf-k8s-critiq-tf-pool-fr-par-1-dev1-8bb732
- [POP-710] Memory threshold (80%) reached 81%

PERSISTENTVOLUMES (31 SCANNED)

0 0 0 31 100%

PERSISTENTVOLUMECLAIMS (24 SCANNED)

0 0 4 20 100%

outils/data-outils-elasticsearch-master-0
- [POP-400] Used? Unable to locate resource reference
outils/data-outils-redis-0
- [POP-400] Used? Unable to locate resource reference
outils/glpi-plugins
- [POP-400] Used? Unable to locate resource reference
pilotage/data-pilotage-postgresql-0
- [POP-400] Used? Unable to locate resource reference

PODS (78 SCANNED)

2 74 2 0 2%

bcdc/bcdc-back-5498fc5fc8-n2z7d
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- bcdc-back
bcdc/bcdc-db-cluster-1
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- bootstrap-controller
- postgres
bcdc/bcdc-front-cf7876d4d-rsz6f
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- bcdc-front
bcdc/bcdc-phoenix-0
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- bcdc-phoenix
bcdc/bcdc-redis-master-0
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- redis
bcdc/bcdc-superset-5ddbc6fff7-t54k7
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- superset
- wait-for-postgres
bcdc/bcdc-superset-worker-57bb4889bc-8x96c
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- superset
- wait-for-postgres-redis
botkube/botkube-78cbd47cfd-wbwxw
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- botkube
gitlab/garage-0
- [POP-206] Pod has no associated PodDisruptionBudget
- garage
gitlab/gitlab-gitaly-0
- [POP-300] Uses "default" ServiceAccount
- certificates
- configure
- gitaly
gitlab/gitlab-gitlab-exporter-854f784584-5f2kp
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- certificates
- configure
- gitlab-exporter
gitlab/gitlab-gitlab-pages-7cc475b56c-k6w7p
- [POP-300] Uses "default" ServiceAccount
- certificates
- configure
- gitlab-pages
gitlab/gitlab-gitlab-runner-5c646b8dc8-nmztd
- [POP-206] Pod has no associated PodDisruptionBudget
- gitlab-gitlab-runner
gitlab/gitlab-gitlab-shell-7856f6b6b5-lv76q
- [POP-110] Memory Current/Request (11Mi/5Mi) reached user 80% threshold (220%)
- [POP-300] Uses "default" ServiceAccount
- certificates
- configure
- gitlab-shell
gitlab/gitlab-postgresql-0
- [POP-110] Memory Current/Request (403Mi/256Mi) reached user 80% threshold (157%)
- [POP-206] Pod has no associated PodDisruptionBudget
- metrics
- postgresql
gitlab/gitlab-redis-master-0
- [POP-109] CPU Current/Request (27m/10m) reached user 80% threshold (270%)
- [POP-206] Pod has no associated PodDisruptionBudget
- metrics
- redis
gitlab/gitlab-sidekiq-all-in-1-v2-87d4945ff-654kr
- [POP-207] Pod is in an unhappy phase (Failed)
- [POP-300] Uses "default" ServiceAccount
- certificates
- configure
- dependencies
- sidekiq
gitlab/gitlab-sidekiq-all-in-1-v2-87d4945ff-fs28t
- [POP-109] CPU Current/Request (76m/50m) reached user 80% threshold (152%)
- [POP-110] Memory Current/Request (1095Mi/596Mi) reached user 80% threshold (183%)
- [POP-300] Uses "default" ServiceAccount
- certificates
- configure
- dependencies
- sidekiq
gitlab/gitlab-toolbox-5c58c485cc-4vlqc
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- certificates
- configure
- toolbox
gitlab/gitlab-toolbox-backup-29728080-9hd95
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- certificates
- configure
- toolbox-backup
gitlab/gitlab-toolbox-backup-29729520-2rq78
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- certificates
- configure
- toolbox-backup
gitlab/gitlab-toolbox-backup-29730960-8mrb2
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- certificates
- configure
- toolbox-backup
gitlab/gitlab-webservice-default-76d55d987d-g76vg
- [POP-110] Memory Current/Request (2677Mi/1907Mi) reached user 80% threshold (140%)
- [POP-300] Uses "default" ServiceAccount
- certificates
- configure
- dependencies
- gitlab-workhorse
- webservice
kube-system/cilium-hxbn2
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- apply-sysctl-overwrites
- cilium-agent
- clean-cilium-state
- config
- install-cni-binaries
- mount-bpf-fs
- mount-cgroup
kube-system/cilium-jvf68
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- apply-sysctl-overwrites
- cilium-agent
- clean-cilium-state
- config
- install-cni-binaries
- mount-bpf-fs
- mount-cgroup
kube-system/cilium-l27xp
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- apply-sysctl-overwrites
- cilium-agent
- clean-cilium-state
- config
- install-cni-binaries
- mount-bpf-fs
- mount-cgroup
kube-system/cilium-n6psr
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- apply-sysctl-overwrites
- cilium-agent
- clean-cilium-state
- config
- install-cni-binaries
- mount-bpf-fs
- mount-cgroup
kube-system/cilium-operator-d4fc759dc-csq29
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- cilium-operator
kube-system/coredns-7f7dd78795-64sct
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- coredns
kube-system/csi-node-8fjw5
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- csi-node-driver-registrar
- csi-plugin
kube-system/csi-node-rg7wk
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- csi-node-driver-registrar
- csi-plugin
kube-system/csi-node-xblz2
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- csi-node-driver-registrar
- csi-plugin
kube-system/csi-node-xr6gf
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- csi-node-driver-registrar
- csi-plugin
kube-system/konnectivity-agent-9pmpz
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- konnectivity-agent
kube-system/konnectivity-agent-hqbjv
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- konnectivity-agent
kube-system/konnectivity-agent-lfhsw
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- konnectivity-agent
kube-system/konnectivity-agent-x7qxj
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- konnectivity-agent
kube-system/metrics-server-7c4f55784d-r57r5
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- metrics-server
monitoring/alloy-2dk2j
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- alloy
- config-reloader
monitoring/alloy-s4xxg
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- alloy
- config-reloader
monitoring/oauth2-proxy-9d6644bc-rns4f
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- oauth2-proxy
monitoring/popeye-29728500-bd9bk
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- popeye
monitoring/popeye-29732040-9jj9q
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- popeye
monitoring/popeye-29732100-mchmk
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- popeye
monitoring/popeye-nginx-5f97d756d-bqscz
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- nginx
monitoring/pushgateway-prometheus-pushgateway-554fb89dfd-kzww4
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- pushgateway
n8n/n8n-77c6f945bf-8psvx
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
outils/glpi-55885fdd87-r595q
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- glpi
- wait-for-db
outils/glpi-mysql-5987f74fb7-66j9p
- [POP-110] Memory Current/Request (461Mi/512Mi) reached user 80% threshold (90%)
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- mysql
outils/outils-wiki-5b4b97898-xzgb7
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- wiki
outils/wikijs-db-cluster-1
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- bootstrap-controller
- postgres
pilotage/pilotage-db-1
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- bootstrap-controller
- postgres
pilotage/pilotage-redis-master-0
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- redis
pilotage/pilotage-superset-768476fc4b-7pzxg
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- superset
- wait-for-postgres
pilotage/pilotage-superset-worker-66db748774-mctlc
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- superset
- wait-for-postgres-redis
share/share-76c4d78f56-bttqv
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- migrate
- share
share/share-purge-29728980-z55f5
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- purge
share/share-purge-29731860-m9zkb
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- purge
trombinoscope/trombinoscope-69cd6c6d76-mj7n2
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- trombinoscope
val-system/cert-manager-cainjector-655bb66698-5vqtq
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- cert-manager-cainjector
val-system/cert-manager-f97bfdc8c-r4fg6
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- cert-manager-controller
val-system/cert-manager-webhook-586666dcd7-zp8ct
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- cert-manager-webhook
val-system/cnpg-cloudnative-pg-67d4577fcb-jpq67
- [POP-206] Pod has no associated PodDisruptionBudget
- manager
val-system/external-dns-6486ff6f57-tm6hp
- [POP-301] Connects to API Server? ServiceAccount token is mounted
val-system/external-secrets-685fb8b7d6-kbgzf
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- external-secrets
val-system/external-secrets-cert-controller-5c44687f97-8c9ts
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- cert-controller
val-system/external-secrets-webhook-64d9476d79-8cd82
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- webhook
val-system/nginx-ingress-controller-ingress-nginx-controller-6d669d75qgbfj
- [POP-110] Memory Current/Request (91Mi/90Mi) reached user 80% threshold (101%)
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- controller
val-system/scaleway-certmanager-webhook-8c97d5557-zkdr4
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- scaleway-certmanager-webhook
val-system/traefik-7dc6ffbcf4-5mb5h
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- traefik
valeuriad-wordpress/valeuriad-wordpress-app-85c67bb5c8-zz7sf
- [POP-206] Pod has no associated PodDisruptionBudget
- copy-wp-files
- nginx
- php-fpm
- wait-for-db
valeuriad-wordpress/valeuriad-wordpress-mariadb-54bdbb7b74-wg9sx
- [POP-206] Pod has no associated PodDisruptionBudget
- mariadb
valeuriad-wordpress/valeuriad-wordpress-redis-649497cc85-t46v9
- [POP-206] Pod has no associated PodDisruptionBudget
- redis
velero/velero-6747bf9f65-xhpl6
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- velero
- velero-plugin-for-aws
velero/velero-ui-68c7c958b9-w94xt
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- velero-ui
whoz-sync-middleware/redis-explorer-b764b9bf-vr4td
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- redis-commander
whoz-sync-middleware/whoz-sync-middleware-app-7d6b869b9f-zldzq
- [POP-110] Memory Current/Request (268Mi/128Mi) reached user 80% threshold (209%)
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- app
- db-explorer
- migrations
whoz-sync-middleware/whoz-sync-middleware-redis-57d7768845-vg9dl
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- init-redis
- redis

PODDISRUPTIONBUDGETS (11 SCANNED)

0 1 0 10 90%

gitlab/gitlab-minio-v1
- [POP-900] No pods match pdb selector: app=minio,component=app,release=gitlab

REPLICASETS (183 SCANNED)

1 0 0 182 99%

bcdc/bcdc-back-5498fc5fc8
- [POP-1120] Unhealthy ReplicaSet 1 desired but have 0 ready

ROLES (27 SCANNED)

0 0 0 27 100%

ROLEBINDINGS (29 SCANNED)

0 0 0 29 100%

SECRETS (228 SCANNED)

0 0 160 68 100%

bcdc/bcdc-db-cluster-ca
- [POP-400] Used? Unable to locate resource reference
bcdc/bcdc-db-cluster-replication
- [POP-400] Used? Unable to locate resource reference
bcdc/bcdc-db-cluster-server
- [POP-400] Used? Unable to locate resource reference
bcdc/boondmanager-creds
- [POP-400] Used? Unable to locate resource reference
bcdc/db
- [POP-400] Used? Unable to locate resource reference
bcdc/sh.helm.release.v1.bcdc.v10
- [POP-400] Used? Unable to locate resource reference
bcdc/sh.helm.release.v1.bcdc.v11
- [POP-400] Used? Unable to locate resource reference
bcdc/sh.helm.release.v1.bcdc.v2
- [POP-400] Used? Unable to locate resource reference
bcdc/sh.helm.release.v1.bcdc.v3
- [POP-400] Used? Unable to locate resource reference
bcdc/sh.helm.release.v1.bcdc.v4
- [POP-400] Used? Unable to locate resource reference
bcdc/sh.helm.release.v1.bcdc.v5
- [POP-400] Used? Unable to locate resource reference
bcdc/sh.helm.release.v1.bcdc.v6
- [POP-400] Used? Unable to locate resource reference
bcdc/sh.helm.release.v1.bcdc.v7
- [POP-400] Used? Unable to locate resource reference
bcdc/sh.helm.release.v1.bcdc.v8
- [POP-400] Used? Unable to locate resource reference
bcdc/sh.helm.release.v1.bcdc.v9
- [POP-400] Used? Unable to locate resource reference
bcdc/showcase-api-keys
- [POP-400] Used? Unable to locate resource reference
botkube/sh.helm.release.v1.botkube.v1
- [POP-400] Used? Unable to locate resource reference
botkube/sh.helm.release.v1.botkube.v2
- [POP-400] Used? Unable to locate resource reference
botkube/sh.helm.release.v1.botkube.v3
- [POP-400] Used? Unable to locate resource reference
gitlab/garage-configure-script
- [POP-400] Used? Unable to locate resource reference
gitlab/garage-trivy-s3
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-gitlab-initial-root-password
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-gitlab-tls
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-minio-secret
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-minio-tls
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-registry-httpsecret
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-registry-secret
- [POP-401] Key "registry-auth.crt" used? Unable to locate key reference
gitlab/gitlab-wildcard-tls-chain
- [POP-400] Used? Unable to locate resource reference
gitlab/registry
- [POP-400] Used? Unable to locate resource reference
gitlab/runner-jwtyuxktq-project-463-concurrent-0-gmz4x2cy
- [POP-400] Used? Unable to locate resource reference
gitlab/sh.helm.release.v1.garage.v1
- [POP-400] Used? Unable to locate resource reference
gitlab/sh.helm.release.v1.garage.v2
- [POP-400] Used? Unable to locate resource reference
gitlab/sh.helm.release.v1.gitlab.v51
- [POP-400] Used? Unable to locate resource reference
gitlab/sh.helm.release.v1.gitlab.v52
- [POP-400] Used? Unable to locate resource reference
gitlab/sh.helm.release.v1.gitlab.v53
- [POP-400] Used? Unable to locate resource reference
gitlab/sh.helm.release.v1.gitlab.v54
- [POP-400] Used? Unable to locate resource reference
gitlab/sh.helm.release.v1.gitlab.v55
- [POP-400] Used? Unable to locate resource reference
gitlab/sh.helm.release.v1.gitlab.v56
- [POP-400] Used? Unable to locate resource reference
gitlab/sh.helm.release.v1.gitlab.v57
- [POP-400] Used? Unable to locate resource reference
gitlab/sh.helm.release.v1.gitlab.v58
- [POP-400] Used? Unable to locate resource reference
gitlab/sh.helm.release.v1.gitlab.v59
- [POP-400] Used? Unable to locate resource reference
gitlab/sh.helm.release.v1.gitlab.v60
- [POP-400] Used? Unable to locate resource reference
kube-system/cilium-ca
- [POP-400] Used? Unable to locate resource reference
monitoring/sh.helm.release.v1.alloy.v1
- [POP-400] Used? Unable to locate resource reference
monitoring/sh.helm.release.v1.alloy.v2
- [POP-400] Used? Unable to locate resource reference
monitoring/sh.helm.release.v1.oauth2-proxy.v1
- [POP-400] Used? Unable to locate resource reference
monitoring/sh.helm.release.v1.pushgateway.v1
- [POP-400] Used? Unable to locate resource reference
n8n/n8n.local-tls
- [POP-400] Used? Unable to locate resource reference
n8n/sh.helm.release.v1.n8n.v10
- [POP-400] Used? Unable to locate resource reference
n8n/sh.helm.release.v1.n8n.v11
- [POP-400] Used? Unable to locate resource reference
n8n/sh.helm.release.v1.n8n.v2
- [POP-400] Used? Unable to locate resource reference
n8n/sh.helm.release.v1.n8n.v3
- [POP-400] Used? Unable to locate resource reference
n8n/sh.helm.release.v1.n8n.v4
- [POP-400] Used? Unable to locate resource reference
n8n/sh.helm.release.v1.n8n.v5
- [POP-400] Used? Unable to locate resource reference
n8n/sh.helm.release.v1.n8n.v6
- [POP-400] Used? Unable to locate resource reference
n8n/sh.helm.release.v1.n8n.v7
- [POP-400] Used? Unable to locate resource reference
n8n/sh.helm.release.v1.n8n.v8
- [POP-400] Used? Unable to locate resource reference
n8n/sh.helm.release.v1.n8n.v9
- [POP-400] Used? Unable to locate resource reference
outils/sh.helm.release.v1.outils.v16
- [POP-400] Used? Unable to locate resource reference
outils/sh.helm.release.v1.outils.v17
- [POP-400] Used? Unable to locate resource reference
outils/sh.helm.release.v1.outils.v18
- [POP-400] Used? Unable to locate resource reference
outils/sh.helm.release.v1.outils.v19
- [POP-400] Used? Unable to locate resource reference
outils/sh.helm.release.v1.outils.v20
- [POP-400] Used? Unable to locate resource reference
outils/sh.helm.release.v1.outils.v21
- [POP-400] Used? Unable to locate resource reference
outils/sh.helm.release.v1.outils.v22
- [POP-400] Used? Unable to locate resource reference
outils/sh.helm.release.v1.outils.v23
- [POP-400] Used? Unable to locate resource reference
outils/sh.helm.release.v1.outils.v24
- [POP-400] Used? Unable to locate resource reference
outils/sh.helm.release.v1.outils.v25
- [POP-400] Used? Unable to locate resource reference
outils/wikijs-db-cluster-ca
- [POP-400] Used? Unable to locate resource reference
outils/wikijs-db-cluster-replication
- [POP-400] Used? Unable to locate resource reference
outils/wikijs-db-cluster-server
- [POP-400] Used? Unable to locate resource reference
outils/wikijs-db-credentials
- [POP-401] Key "username" used? Unable to locate key reference
outils/zammad-tls
- [POP-400] Used? Unable to locate resource reference
pilotage/pilotage-db-ca
- [POP-400] Used? Unable to locate resource reference
pilotage/pilotage-db-replication
- [POP-400] Used? Unable to locate resource reference
pilotage/pilotage-db-server
- [POP-400] Used? Unable to locate resource reference
pilotage/registry
- [POP-400] Used? Unable to locate resource reference
pilotage/sh.helm.release.v1.pilotage.v15
- [POP-400] Used? Unable to locate resource reference
pilotage/sh.helm.release.v1.pilotage.v16
- [POP-400] Used? Unable to locate resource reference
pilotage/sh.helm.release.v1.pilotage.v17
- [POP-400] Used? Unable to locate resource reference
pilotage/sh.helm.release.v1.pilotage.v18
- [POP-400] Used? Unable to locate resource reference
pilotage/sh.helm.release.v1.pilotage.v19
- [POP-400] Used? Unable to locate resource reference
pilotage/sh.helm.release.v1.pilotage.v20
- [POP-400] Used? Unable to locate resource reference
pilotage/sh.helm.release.v1.pilotage.v21
- [POP-400] Used? Unable to locate resource reference
pilotage/sh.helm.release.v1.pilotage.v22
- [POP-400] Used? Unable to locate resource reference
pilotage/sh.helm.release.v1.pilotage.v23
- [POP-400] Used? Unable to locate resource reference
pilotage/sh.helm.release.v1.pilotage.v24
- [POP-400] Used? Unable to locate resource reference
share/sh.helm.release.v1.share.v1
- [POP-400] Used? Unable to locate resource reference
share/sh.helm.release.v1.share.v2
- [POP-400] Used? Unable to locate resource reference
share/sh.helm.release.v1.share.v3
- [POP-400] Used? Unable to locate resource reference
share/sh.helm.release.v1.share.v4
- [POP-400] Used? Unable to locate resource reference
share/sh.helm.release.v1.share.v5
- [POP-400] Used? Unable to locate resource reference
share/sh.helm.release.v1.share.v6
- [POP-400] Used? Unable to locate resource reference
share/sh.helm.release.v1.share.v7
- [POP-400] Used? Unable to locate resource reference
share/sh.helm.release.v1.share.v8
- [POP-400] Used? Unable to locate resource reference
streamlit/credentials
- [POP-400] Used? Unable to locate resource reference
streamlit/registry
- [POP-400] Used? Unable to locate resource reference
streamlit/sh.helm.release.v1.streamlit.v1
- [POP-400] Used? Unable to locate resource reference
trombinoscope/sh.helm.release.v1.trombinoscope.v1
- [POP-400] Used? Unable to locate resource reference
trombinoscope/sh.helm.release.v1.trombinoscope.v2
- [POP-400] Used? Unable to locate resource reference
trombinoscope/sh.helm.release.v1.trombinoscope.v3
- [POP-400] Used? Unable to locate resource reference
trombinoscope/sh.helm.release.v1.trombinoscope.v4
- [POP-400] Used? Unable to locate resource reference
trombinoscope/sh.helm.release.v1.trombinoscope.v5
- [POP-400] Used? Unable to locate resource reference
trombinoscope/sh.helm.release.v1.trombinoscope.v6
- [POP-400] Used? Unable to locate resource reference
trombinoscope/sh.helm.release.v1.trombinoscope.v7
- [POP-400] Used? Unable to locate resource reference
val-system/cert-manager-webhook-ca
- [POP-400] Used? Unable to locate resource reference
val-system/cnpg-ca-secret
- [POP-400] Used? Unable to locate resource reference
val-system/letsencrypt
- [POP-400] Used? Unable to locate resource reference
val-system/scaleway-certmanager-webhook-ca
- [POP-400] Used? Unable to locate resource reference
val-system/scwsm-secret
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.cert-manager.v1
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.cert-manager.v2
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.cnpg.v1
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.cnpg.v2
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.external-dns.v1
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.external-dns.v2
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.external-dns.v3
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.external-dns.v4
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.external-secrets.v1
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.external-secrets.v2
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.nginx-ingress-controller.v1
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.nginx-ingress-controller.v2
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.nginx-ingress-controller.v3
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.nginx-ingress-controller.v4
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.nginx-ingress-controller.v5
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.nginx-ingress-controller.v6
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.nginx-ingress-controller.v7
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.nginx-ingress-controller.v8
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.scaleway-certmanager-webhook.v1
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.traefik.v1
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.traefik.v2
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.traefik.v3
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.traefik.v4
- [POP-400] Used? Unable to locate resource reference
valeuriad-wordpress/sh.helm.release.v1.valeuriad-wordpress.v1
- [POP-400] Used? Unable to locate resource reference
valeuriad-wordpress/sh.helm.release.v1.valeuriad-wordpress.v2
- [POP-400] Used? Unable to locate resource reference
valeuriad-wordpress/sh.helm.release.v1.valeuriad-wordpress.v3
- [POP-400] Used? Unable to locate resource reference
valeuriad-wordpress/sh.helm.release.v1.valeuriad-wordpress.v4
- [POP-400] Used? Unable to locate resource reference
valeuriad-wordpress/sh.helm.release.v1.valeuriad-wordpress.v5
- [POP-400] Used? Unable to locate resource reference
valeuriad-wordpress/sh.helm.release.v1.valeuriad-wordpress.v6
- [POP-400] Used? Unable to locate resource reference
valeuriad-wordpress/sh.helm.release.v1.valeuriad-wordpress.v7
- [POP-400] Used? Unable to locate resource reference
valeuriad-wordpress/sh.helm.release.v1.valeuriad-wordpress.v8
- [POP-400] Used? Unable to locate resource reference
velero/sh.helm.release.v1.velero-ui.v1
- [POP-400] Used? Unable to locate resource reference
velero/sh.helm.release.v1.velero-ui.v2
- [POP-400] Used? Unable to locate resource reference
velero/sh.helm.release.v1.velero-ui.v3
- [POP-400] Used? Unable to locate resource reference
velero/sh.helm.release.v1.velero.v1
- [POP-400] Used? Unable to locate resource reference
velero/sh.helm.release.v1.velero.v2
- [POP-400] Used? Unable to locate resource reference
velero/sh.helm.release.v1.velero.v3
- [POP-400] Used? Unable to locate resource reference
velero/sh.helm.release.v1.velero.v4
- [POP-400] Used? Unable to locate resource reference
velero/sh.helm.release.v1.velero.v5
- [POP-400] Used? Unable to locate resource reference
velero/velero-repo-credentials
- [POP-400] Used? Unable to locate resource reference
velero/velero-ui-passphrase
- [POP-400] Used? Unable to locate resource reference
whoz-sync-middleware/sh.helm.release.v1.whoz-sync-middleware.v1
- [POP-400] Used? Unable to locate resource reference
whoz-sync-middleware/sh.helm.release.v1.whoz-sync-middleware.v2
- [POP-400] Used? Unable to locate resource reference
whoz-sync-middleware/sh.helm.release.v1.whoz-sync-middleware.v3
- [POP-400] Used? Unable to locate resource reference
whoz-sync-middleware/sh.helm.release.v1.whoz-sync-middleware.v4
- [POP-400] Used? Unable to locate resource reference
whoz-sync-middleware/sh.helm.release.v1.whoz-sync-middleware.v5
- [POP-400] Used? Unable to locate resource reference
whoz-sync-middleware/sh.helm.release.v1.whoz-sync-middleware.v6
- [POP-400] Used? Unable to locate resource reference
whoz-sync-middleware/sh.helm.release.v1.whoz-sync-middleware.v7
- [POP-400] Used? Unable to locate resource reference
whoz-sync-middleware/sh.helm.release.v1.whoz-sync-middleware.v8
- [POP-400] Used? Unable to locate resource reference
whoz-sync-middleware/sh.helm.release.v1.whoz-sync-middleware.v9
- [POP-400] Used? Unable to locate resource reference

SERVICES (67 SCANNED)

6 57 2 2 5%

bcdc/bcdc-back
- [POP-1102] Use of target port #80 for service port TCP:http:80. Prefer named port
bcdc/bcdc-db-cluster-r
- [POP-1102] Use of target port #5432 for service port TCP:postgres:5432. Prefer named port
- [POP-1109] Single endpoint is associated with this service
bcdc/bcdc-db-cluster-ro
- [POP-1100] No pods match service selector
- [POP-1110] Match EP has no subsets
bcdc/bcdc-db-cluster-rw
- [POP-1102] Use of target port #5432 for service port TCP:postgres:5432. Prefer named port
- [POP-1109] Single endpoint is associated with this service
bcdc/bcdc-front
- [POP-1102] Use of target port #80 for service port TCP:http:80. Prefer named port
- [POP-1109] Single endpoint is associated with this service
bcdc/bcdc-phoenix
- [POP-1102] Use of target port #6006 for service port TCP::443. Prefer named port
- [POP-1109] Single endpoint is associated with this service
bcdc/bcdc-redis-headless
- [POP-1109] Single endpoint is associated with this service
bcdc/bcdc-redis-master
- [POP-1109] Single endpoint is associated with this service
bcdc/bcdc-superset
- [POP-1109] Single endpoint is associated with this service
botkube/botkube
- [POP-1101] Skip ports check. No explicit ports detected on pod botkube/botkube-78cbd47cfd-wbwxw
- [POP-1109] Single endpoint is associated with this service
gitlab/garage
- [POP-1109] Single endpoint is associated with this service
gitlab/garage-headless
- [POP-1109] Single endpoint is associated with this service
gitlab/gitlab-gitaly
- [POP-1109] Single endpoint is associated with this service
gitlab/gitlab-gitlab-exporter
- [POP-1109] Single endpoint is associated with this service
gitlab/gitlab-gitlab-pages
- [POP-1106] No target ports match service port TCP:http-gitlab-pages-proxy:8090
- [POP-1109] Single endpoint is associated with this service
gitlab/gitlab-gitlab-pages-metrics
- [POP-1109] Single endpoint is associated with this service
gitlab/gitlab-gitlab-shell
- [POP-1102] Use of target port #2222 for service port TCP:ssh:22. Prefer named port
- [POP-1109] Single endpoint is associated with this service
gitlab/gitlab-postgresql
- [POP-1109] Single endpoint is associated with this service
gitlab/gitlab-postgresql-hl
- [POP-1109] Single endpoint is associated with this service
gitlab/gitlab-postgresql-metrics
- [POP-1109] Single endpoint is associated with this service
gitlab/gitlab-redis-headless
- [POP-1109] Single endpoint is associated with this service
gitlab/gitlab-redis-master
- [POP-1109] Single endpoint is associated with this service
gitlab/gitlab-redis-metrics
- [POP-1109] Single endpoint is associated with this service
gitlab/gitlab-webservice-default
- [POP-1109] Single endpoint is associated with this service
kube-system/coredns
- [POP-1102] Use of target port #53 for service port UDP:dns:53. Prefer named port
- [POP-1102] Use of target port #53 for service port TCP:dns-tcp:53. Prefer named port
- [POP-1102] Use of target port #9153 for service port TCP:metrics:9153. Prefer named port
- [POP-1109] Single endpoint is associated with this service
kube-system/metrics-server
- [POP-1109] Single endpoint is associated with this service
monitoring/alloy
- [POP-1102] Use of target port #12345 for service port TCP:http-metrics:12345. Prefer named port
monitoring/oauth2-proxy
- [POP-1109] Single endpoint is associated with this service
monitoring/popeye-nginx
- [POP-1102] Use of target port #80 for service port TCP:http:80. Prefer named port
- [POP-1109] Single endpoint is associated with this service
monitoring/pushgateway-prometheus-pushgateway
- [POP-1102] Use of target port #9091 for service port TCP:http:9091. Prefer named port
- [POP-1109] Single endpoint is associated with this service
n8n/n8n
- [POP-1109] Single endpoint is associated with this service
outils/glpi
- [POP-1109] Single endpoint is associated with this service
outils/glpi-mysql
- [POP-1102] Use of target port #3306 for service port TCP:mysql:3306. Prefer named port
- [POP-1109] Single endpoint is associated with this service
outils/outils-wiki
- [POP-1109] Single endpoint is associated with this service
outils/wikijs-db-cluster-r
- [POP-1102] Use of target port #5432 for service port TCP:postgres:5432. Prefer named port
- [POP-1109] Single endpoint is associated with this service
outils/wikijs-db-cluster-ro
- [POP-1100] No pods match service selector
- [POP-1110] Match EP has no subsets
outils/wikijs-db-cluster-rw
- [POP-1102] Use of target port #5432 for service port TCP:postgres:5432. Prefer named port
- [POP-1109] Single endpoint is associated with this service
pilotage/pilotage-db-r
- [POP-1102] Use of target port #5432 for service port TCP:postgres:5432. Prefer named port
- [POP-1109] Single endpoint is associated with this service
pilotage/pilotage-db-ro
- [POP-1100] No pods match service selector
- [POP-1110] Match EP has no subsets
pilotage/pilotage-db-rw
- [POP-1102] Use of target port #5432 for service port TCP:postgres:5432. Prefer named port
- [POP-1109] Single endpoint is associated with this service
pilotage/pilotage-redis-headless
- [POP-1109] Single endpoint is associated with this service
pilotage/pilotage-redis-master
- [POP-1109] Single endpoint is associated with this service
pilotage/pilotage-superset
- [POP-1109] Single endpoint is associated with this service
share/share
- [POP-1109] Single endpoint is associated with this service
streamlit/streamlit
- [POP-1100] No pods match service selector
- [POP-1110] Match EP has no subsets
trombinoscope/trombinoscope
- [POP-1102] Use of target port #5000 for service port TCP:https:443. Prefer named port
- [POP-1109] Single endpoint is associated with this service
val-system/cert-manager
- [POP-1109] Single endpoint is associated with this service
val-system/cert-manager-cainjector
- [POP-1102] Use of target port #9402 for service port TCP:http-metrics:9402. Prefer named port
- [POP-1109] Single endpoint is associated with this service
val-system/cert-manager-webhook
- [POP-1109] Single endpoint is associated with this service
val-system/cnpg-webhook-service
- [POP-1109] Single endpoint is associated with this service
val-system/external-dns
- [POP-1109] Single endpoint is associated with this service
val-system/external-secrets-webhook
- [POP-1102] Use of target port #10250 for service port TCP:webhook:443. Prefer named port
- [POP-1109] Single endpoint is associated with this service
val-system/nginx-ingress-controller-ingress-nginx-controller
- [POP-1109] Single endpoint is associated with this service
- [POP-1103] Type LoadBalancer detected. Could be expensive
- [POP-1107] LoadBalancer detected but service sets externalTrafficPolicy to "Cluster"
val-system/nginx-ingress-controller-ingress-nginx-controller-admission
- [POP-1109] Single endpoint is associated with this service
val-system/scaleway-certmanager-webhook
- [POP-1109] Single endpoint is associated with this service
val-system/traefik
- [POP-1109] Single endpoint is associated with this service
- [POP-1103] Type LoadBalancer detected. Could be expensive
valeuriad-wordpress/valeuriad-wordpress
- [POP-1102] Use of target port #8080 for service port TCP:http:80. Prefer named port
- [POP-1106] No target ports match service port TCP:https:443
- [POP-1109] Single endpoint is associated with this service
valeuriad-wordpress/valeuriad-wordpress-mariadb
- [POP-1102] Use of target port #3306 for service port TCP::3306. Prefer named port
- [POP-1109] Single endpoint is associated with this service
valeuriad-wordpress/valeuriad-wordpress-redis
- [POP-1102] Use of target port #6379 for service port TCP::6379. Prefer named port
- [POP-1109] Single endpoint is associated with this service
velero/velero
- [POP-1109] Single endpoint is associated with this service
velero/velero-ui
- [POP-1109] Single endpoint is associated with this service
whoz-sync-middleware/redis-explorer-svc
- [POP-1102] Use of target port #8081 for service port TCP::80. Prefer named port
- [POP-1109] Single endpoint is associated with this service
whoz-sync-middleware/whoz-sync-middleware
- [POP-1102] Use of target port #3333 for service port TCP:http:80. Prefer named port
- [POP-1109] Single endpoint is associated with this service
whoz-sync-middleware/whoz-sync-middleware-db-explorer
- [POP-1102] Use of target port #8001 for service port TCP:http-explorer:80. Prefer named port
- [POP-1109] Single endpoint is associated with this service
whoz-sync-middleware/whoz-sync-middleware-redis
- [POP-1102] Use of target port #6379 for service port TCP::6379. Prefer named port
- [POP-1109] Single endpoint is associated with this service

SERVICEACCOUNTS (98 SCANNED)

0 13 1 84 86%

bcdc/bcdc-redis
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
monitoring/alloy
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
monitoring/oauth2-proxy
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
monitoring/popeye
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
monitoring/pushgateway-prometheus-pushgateway
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
n8n/n8n
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
pilotage/pilotage-redis
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
streamlit/streamlit
- [POP-400] Used? Unable to locate resource reference
val-system/cert-manager
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
val-system/cert-manager-cainjector
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
val-system/cert-manager-webhook
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
val-system/nginx-ingress-controller-ingress-nginx
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
velero/velero-server
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
velero/velero-ui
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials

STATEFULSETS (7 SCANNED)

0 7 0 0 0%

bcdc/bcdc-phoenix
- bcdc-phoenix
bcdc/bcdc-redis-master
- redis
gitlab/garage
- garage
gitlab/gitlab-gitaly
- certificates
- configure
- gitaly
gitlab/gitlab-postgresql
- metrics
- postgresql
gitlab/gitlab-redis-master
- [POP-503] At current load, CPU under allocated. Current:27m vs Requested:10m (270.00%)
- metrics
- redis
pilotage/pilotage-redis-master
- redis