Popeye Scan Report

CILIUMCLUSTERWIDENETWORKPOLICIES (0 SCANNED)

0 0 0 0 100%

CILIUMENDPOINTS (60 SCANNED)

0 0 0 60 100%

CILIUMIDENTITIES (61 SCANNED)

0 2 0 59 96%

monitoring/10662
- [POP-1600] Stale? unable to locate matching Cilium Endpoint
monitoring/44158
- [POP-1600] Stale? unable to locate matching Cilium Endpoint

CILIUMNETWORKPOLICIES (0 SCANNED)

0 0 0 0 100%

CLUSTERS (1 SCANNED)

0 0 0 1 100%

Version
- [POP-406] K8s version OK

CLUSTERROLES (106 SCANNED)

0 0 5 101 100%

cert-manager-cluster-view
- [POP-400] Used? Unable to locate resource reference
cnpg-cloudnative-pg-edit
- [POP-400] Used? Unable to locate resource reference
cnpg-cloudnative-pg-view
- [POP-400] Used? Unable to locate resource reference
external-secrets-servicebindings
- [POP-400] Used? Unable to locate resource reference
velero-ui
- [POP-400] Used? Unable to locate resource reference

CLUSTERROLEBINDINGS (88 SCANNED)

0 4 0 84 95%

system:controller:route-controller
- [POP-1300] References a ServiceAccount (kube-system/route-controller) which does not exist
system:controller:selinux-warning-controller
- [POP-1300] References a ServiceAccount (kube-system/selinux-warning-controller) which does not exist
system:controller:service-controller
- [POP-1300] References a ServiceAccount (kube-system/service-controller) which does not exist
system:kube-dns
- [POP-1300] References a ServiceAccount (kube-system/kube-dns) which does not exist

CONFIGMAPS (70 SCANNED)

0 0 20 50 100%

bcdc/cnpg-default-monitoring
- [POP-400] Used? Unable to locate resource reference
botkube/botkube-system
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-certmanager-issuer-certmanager
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-gitlab-chart-info
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-gitlab-upgrade-check
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-minio-config-cm
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-nginx-ingress-tcp
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-webservice-tests
- [POP-400] Used? Unable to locate resource reference
kube-system/cluster-autoscaler-status
- [POP-400] Used? Unable to locate resource reference
kube-system/extension-apiserver-authentication
- [POP-400] Used? Unable to locate resource reference
kube-system/kube-apiserver-legacy-service-account-token-tracking
- [POP-400] Used? Unable to locate resource reference
kube-system/kube-proxy
- [POP-400] Used? Unable to locate resource reference
outils/cnpg-default-monitoring
- [POP-400] Used? Unable to locate resource reference
val-system/cnpg-controller-manager-config
- [POP-400] Used? Unable to locate resource reference
val-system/cnpg-default-monitoring
- [POP-400] Used? Unable to locate resource reference
val-system/nginx-ingress-controller-ingress-nginx-controller
- [POP-400] Used? Unable to locate resource reference
val-system/nginx-ingress-controller-ingress-nginx-tcp
- [POP-400] Used? Unable to locate resource reference
velero/ingress-host-modifier
- [POP-400] Used? Unable to locate resource reference
velero/velero-repo-maintenance
- [POP-400] Used? Unable to locate resource reference
velero/velero-ui
- [POP-400] Used? Unable to locate resource reference

CRONJOBS (5 SCANNED)

0 4 0 1 20%

bcdc/bcdc
- [POP-1501] No active jobs detected
- bcdc
gitlab/gitlab-toolbox-backup
- [POP-1501] No active jobs detected
- certificates
- configure
- toolbox-backup
kube-system/hubble-generate-certs
- [POP-1501] No active jobs detected
- certgen
outils/outils-zammad-cronjob-reindex
- [POP-1500] CronJob is suspended
- [POP-1501] No active jobs detected
- [POP-1502] CronJob has not run yet or is failing
- reindex
- zammad-volume-permissions

DAEMONSETS (5 SCANNED)

1 4 0 0 0%

kube-system/cilium
- [POP-505] At current load, Memory under allocated. Current:1257Mi vs Requested:440Mi (285.68%)
- apply-sysctl-overwrites
- cilium-agent
- clean-cilium-state
- config
- install-cni-binaries
- mount-bpf-fs
- mount-cgroup
kube-system/csi-node
- csi-node-driver-registrar
- csi-plugin
kube-system/konnectivity-agent
- konnectivity-agent
kube-system/kube-proxy
- [POP-508] No pods match controller selector: app=kube-proxy
- kube-proxy
monitoring/alloy
- [POP-503] At current load, CPU under allocated. Current:42m vs Requested:20m (210.00%)
- [POP-505] At current load, Memory under allocated. Current:854Mi vs Requested:100Mi (854.00%)
- alloy
- config-reloader

DEPLOYMENTS (47 SCANNED)

2 38 0 7 14%

bcdc/bcdc-back
- bcdc-back
bcdc/bcdc-front
- bcdc-front
bcdc/bcdc-superset
- superset
- wait-for-postgres
bcdc/bcdc-superset-worker
- superset
- wait-for-postgres-redis
botkube/botkube
- botkube
gitlab/gitlab-gitlab-exporter
- certificates
- configure
- gitlab-exporter
gitlab/gitlab-gitlab-pages
- certificates
- configure
- gitlab-pages
gitlab/gitlab-gitlab-runner
- gitlab-gitlab-runner
gitlab/gitlab-gitlab-shell
- [POP-505] At current load, Memory under allocated. Current:42Mi vs Requested:5Mi (840.00%)
- certificates
- configure
- gitlab-shell
gitlab/gitlab-sidekiq-all-in-1-v2
- certificates
- configure
- dependencies
gitlab/gitlab-toolbox
- certificates
- configure
- toolbox
gitlab/gitlab-webservice-default
- certificates
- configure
- dependencies
- gitlab-workhorse
kube-system/cilium-operator
- cilium-operator
kube-system/metrics-server
- metrics-server
monitoring/oauth2-proxy
- oauth2-proxy
monitoring/popeye-nginx
- nginx
outils/glpi
- wait-for-db
outils/outils-memcached
- memcached
outils/outils-zammad-nginx
- zammad-volume-permissions
outils/outils-zammad-railsserver
- zammad-volume-permissions
outils/outils-zammad-scheduler
- zammad-volume-permissions
outils/outils-zammad-websocket
- zammad-volume-permissions
outils/rustdesk-hbbr
- hbbr
outils/rustdesk-hbbs
- hbbs
streamlit/streamlit
- [POP-500] Zero scale detected
- [POP-508] No pods match controller selector: app.kubernetes.io/name=streamlit,app.kubernetes.io/instance=streamlit
val-system/cert-manager
- cert-manager-controller
val-system/cert-manager-cainjector
- cert-manager-cainjector
val-system/cert-manager-webhook
- cert-manager-webhook
val-system/cnpg-cloudnative-pg
- manager
val-system/external-secrets
- external-secrets
val-system/external-secrets-cert-controller
- cert-controller
val-system/external-secrets-webhook
- webhook
val-system/nginx-ingress-controller-ingress-nginx-controller
- controller
val-system/scaleway-certmanager-webhook
- scaleway-certmanager-webhook
val-system/traefik
- traefik
velero/velero
- velero
- velero-plugin-for-aws
velero/velero-ui
- [POP-500] Zero scale detected
- [POP-508] No pods match controller selector: app.kubernetes.io/name=velero-ui,app.kubernetes.io/instance=velero-ui
- velero-ui
whoz-sync-middleware/redis-explorer
- redis-commander
whoz-sync-middleware/whoz-sync-middleware-app
- [POP-505] At current load, Memory under allocated. Current:258Mi vs Requested:128Mi (201.56%)
- app
- db-explorer
- migrations
whoz-sync-middleware/whoz-sync-middleware-redis
- init-redis
- redis

GATEWAYS (0 SCANNED)

0 0 0 0 100%

GATEWAYCLASSES (0 SCANNED)

0 0 0 0 100%

HORIZONTALPODAUTOSCALERS (5 SCANNED)

0 2 0 3 60%

HPA
- [POP-605] If ALL HPAs triggered, 6323Mi will match/exceed cluster memory(3758Mi) capacity by 2565Mi
gitlab/gitlab-gitlab-pages
- [POP-603] Replicas (1/10) at burst will match/exceed cluster memory(3758Mi) capacity by 1010Mi

HTTPROUTES (0 SCANNED)

0 0 0 0 100%

INGRESSES (17 SCANNED)

2 0 12 3 88%

bcdc/bcdc
- [POP-1403] Ingress backend uses a port#, prefer a named port: 80
- [POP-1403] Ingress backend uses a port#, prefer a named port: 80
bcdc/bcdc-phoenix
- [POP-1403] Ingress backend uses a port#, prefer a named port: 443
gitlab/cm-acme-http-solver-5x2ll
- [POP-1403] Ingress backend uses a port#, prefer a named port: 8089
gitlab/gitlab-gitlab-pages
- [POP-1403] Ingress backend uses a port#, prefer a named port: 8090
gitlab/gitlab-webservice-default
- [POP-1403] Ingress backend uses a port#, prefer a named port: 8181
monitoring/oauth2-proxy
- [POP-1403] Ingress backend uses a port#, prefer a named port: 80
monitoring/popeye-report
- [POP-1403] Ingress backend uses a port#, prefer a named port: 80
n8n/cm-acme-http-solver-blbfp
- [POP-1403] Ingress backend uses a port#, prefer a named port: 8089
n8n/n8n
- [POP-1403] Ingress backend uses a port#, prefer a named port: 5678
outils/outils-wiki
- [POP-1403] Ingress backend uses a port#, prefer a named port: 80
outils/outils-zammad
- [POP-1403] Ingress backend uses a port#, prefer a named port: 8080
streamlit/streamlit
- [POP-1402] Ingress references a service port which is not defined: :8501
- [POP-1403] Ingress backend uses a port#, prefer a named port: 8501
trombinoscope/trombinoscope
- [POP-1402] Ingress references a service port which is not defined: :5000
- [POP-1403] Ingress backend uses a port#, prefer a named port: 5000
velero/velero-ui
- [POP-1403] Ingress backend uses a port#, prefer a named port: 3000

JOBS (17 SCANNED)

0 10 0 7 41%

bcdc/bcdc-superset-init-db
- superset-init-db
- wait-for-postgres
gitlab/gitlab-migrations-3a920a5
- certificates
- configure
- migrations
gitlab/gitlab-migrations-3eed7f9
- certificates
- configure
- migrations
gitlab/gitlab-migrations-4c19501
- certificates
- configure
- migrations
gitlab/gitlab-migrations-57fde49
- certificates
- configure
- migrations
gitlab/gitlab-migrations-603b6ef
- certificates
- configure
- migrations
gitlab/gitlab-migrations-a649578
- certificates
- configure
- migrations
gitlab/gitlab-toolbox-backup-29553840
- certificates
- configure
- toolbox-backup
gitlab/gitlab-toolbox-backup-29555280
- certificates
- configure
- toolbox-backup
gitlab/gitlab-toolbox-backup-29556720
- certificates
- configure
- toolbox-backup

NAMESPACES (18 SCANNED)

0 0 0 18 100%

NETWORKPOLICIES (3 SCANNED)

0 0 0 3 100%

NODES (4 SCANNED)

0 2 0 2 50%

scw-tf-k8s-crit-tf-pool-noshutdown-fr-p-408c33
- [POP-710] Memory threshold (80%) reached 84%
scw-tf-k8s-crit-tf-pool-noshutdown-fr-p-61e92f
- [POP-710] Memory threshold (80%) reached 83%

PERSISTENTVOLUMES (23 SCANNED)

0 0 0 23 100%

PERSISTENTVOLUMECLAIMS (22 SCANNED)

0 0 1 21 100%

outils/glpi-plugins
- [POP-400] Used? Unable to locate resource reference

PODS (81 SCANNED)

2 79 0 0 0%

bcdc/bcdc-back-5498fc5fc8-c7wdh
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- bcdc-back
bcdc/bcdc-db-cluster-1
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- bootstrap-controller
- postgres
bcdc/bcdc-front-cf7876d4d-chlxr
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- bcdc-front
bcdc/bcdc-phoenix-0
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- bcdc-phoenix
bcdc/bcdc-redis-master-0
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- redis
bcdc/bcdc-superset-5ddbc6fff7-fhbhj
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- superset
- wait-for-postgres
bcdc/bcdc-superset-worker-57bb4889bc-d7rrf
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- superset
- wait-for-postgres-redis
botkube/botkube-9d98ddc6f-4n8q6
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- botkube
gitlab/cm-acme-http-solver-t5xmw
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- acmesolver
gitlab/garage-0
- [POP-206] Pod has no associated PodDisruptionBudget
- garage
gitlab/gitlab-gitaly-0
- [POP-110] Memory Current/Request (918Mi/200Mi) reached user 80% threshold (459%)
- [POP-300] Uses "default" ServiceAccount
- certificates
- configure
- gitaly
gitlab/gitlab-gitlab-exporter-854f784584-5f2kp
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- certificates
- configure
- gitlab-exporter
gitlab/gitlab-gitlab-pages-7cc475b56c-jnjkb
- [POP-300] Uses "default" ServiceAccount
- certificates
- configure
- gitlab-pages
gitlab/gitlab-gitlab-runner-9c55b7486-lpd47
- [POP-206] Pod has no associated PodDisruptionBudget
- gitlab-gitlab-runner
gitlab/gitlab-gitlab-shell-7856f6b6b5-lv76q
- [POP-110] Memory Current/Request (42Mi/5Mi) reached user 80% threshold (840%)
- [POP-300] Uses "default" ServiceAccount
- certificates
- configure
- gitlab-shell
gitlab/gitlab-migrations-57fde49-dskh2
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- certificates
- configure
- migrations
gitlab/gitlab-postgresql-0
- [POP-110] Memory Current/Request (350Mi/256Mi) reached user 80% threshold (136%)
- [POP-206] Pod has no associated PodDisruptionBudget
- metrics
- postgresql
gitlab/gitlab-redis-master-0
- [POP-109] CPU Current/Request (26m/10m) reached user 80% threshold (260%)
- [POP-206] Pod has no associated PodDisruptionBudget
- metrics
- redis
gitlab/gitlab-sidekiq-all-in-1-v2-87d4945ff-s7pb7
- [POP-109] CPU Current/Request (82m/50m) reached user 80% threshold (164%)
- [POP-110] Memory Current/Request (1135Mi/596Mi) reached user 80% threshold (190%)
- [POP-300] Uses "default" ServiceAccount
- certificates
- configure
- dependencies
- sidekiq
gitlab/gitlab-toolbox-5c58c485cc-xb5r8
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- certificates
- configure
- toolbox
gitlab/gitlab-toolbox-backup-29553840-2jbn7
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- certificates
- configure
- toolbox-backup
gitlab/gitlab-toolbox-backup-29555280-85skl
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- certificates
- configure
- toolbox-backup
gitlab/gitlab-toolbox-backup-29556720-s4zcf
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- certificates
- configure
- toolbox-backup
gitlab/gitlab-webservice-default-8568bf8965-467xg
- [POP-207] Pod is in an unhappy phase (Failed)
- [POP-300] Uses "default" ServiceAccount
- certificates
- configure
- dependencies
- gitlab-workhorse
- webservice
gitlab/gitlab-webservice-default-8568bf8965-9hjs7
- [POP-110] Memory Current/Request (2222Mi/858Mi) reached user 80% threshold (258%)
- [POP-300] Uses "default" ServiceAccount
- certificates
- configure
- dependencies
- gitlab-workhorse
- webservice
kube-system/cilium-c8z5s
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- apply-sysctl-overwrites
- cilium-agent
- clean-cilium-state
- config
- install-cni-binaries
- mount-bpf-fs
- mount-cgroup
kube-system/cilium-hxbn2
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- apply-sysctl-overwrites
- cilium-agent
- clean-cilium-state
- config
- install-cni-binaries
- mount-bpf-fs
- mount-cgroup
kube-system/cilium-l27xp
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- apply-sysctl-overwrites
- cilium-agent
- clean-cilium-state
- config
- install-cni-binaries
- mount-bpf-fs
- mount-cgroup
kube-system/cilium-n6psr
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- apply-sysctl-overwrites
- cilium-agent
- clean-cilium-state
- config
- install-cni-binaries
- mount-bpf-fs
- mount-cgroup
kube-system/cilium-operator-d4fc759dc-csq29
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- cilium-operator
kube-system/coredns-7f7dd78795-8xxqb
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- coredns
kube-system/csi-node-8fjw5
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- csi-node-driver-registrar
- csi-plugin
kube-system/csi-node-rg7wk
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- csi-node-driver-registrar
- csi-plugin
kube-system/csi-node-xblz2
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- csi-node-driver-registrar
- csi-plugin
kube-system/csi-node-xr6gf
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- csi-node-driver-registrar
- csi-plugin
kube-system/konnectivity-agent-6ddq7
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- konnectivity-agent
kube-system/konnectivity-agent-fpr5d
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- konnectivity-agent
kube-system/konnectivity-agent-hhpzd
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- konnectivity-agent
kube-system/konnectivity-agent-n24dt
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- konnectivity-agent
kube-system/metrics-server-7c4f55784d-ttqtk
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- metrics-server
monitoring/alloy-2dk2j
- [POP-110] Memory Current/Request (46Mi/50Mi) reached user 80% threshold (92%)
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- alloy
- config-reloader
monitoring/alloy-s4xxg
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- alloy
- config-reloader
monitoring/oauth2-proxy-9d6644bc-f2jqd
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- oauth2-proxy
monitoring/popeye-29556720-whwz8
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- popeye
monitoring/popeye-29556780-ldxqb
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- popeye
monitoring/popeye-29556840-7qspl
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- popeye
monitoring/popeye-29556900-jqp9f
- [POP-207] Pod is in an unhappy phase (Pending)
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- popeye
monitoring/popeye-nginx-5f97d756d-m4hl5
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- nginx
monitoring/pushgateway-prometheus-pushgateway-554fb89dfd-gqj7x
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- pushgateway
n8n/cm-acme-http-solver-hf7np
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- acmesolver
n8n/n8n-65745fb8d7-mwjjc
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
outils/glpi-55885fdd87-cqhjc
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- glpi
- wait-for-db
outils/glpi-mysql-5987f74fb7-dl57x
- [POP-110] Memory Current/Request (951Mi/512Mi) reached user 80% threshold (185%)
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- mysql
outils/outils-elasticsearch-master-0
- [POP-110] Memory Current/Request (977Mi/1024Mi) reached user 80% threshold (95%)
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- sysctl
outils/outils-memcached-64cf8d68b5-vgxhj
- [POP-206] Pod has no associated PodDisruptionBudget
- memcached
outils/outils-redis-0
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
outils/outils-wiki-5b4b97898-w9vwh
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- wiki
outils/outils-zammad-nginx-767876dd74-pv7b4
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- zammad-nginx
- zammad-volume-permissions
outils/outils-zammad-railsserver-554cd999b7-d87rp
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- zammad-railsserver
- zammad-volume-permissions
outils/outils-zammad-scheduler-7d56fbdc55-mpw7b
- [POP-110] Memory Current/Request (369Mi/256Mi) reached user 80% threshold (144%)
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- zammad-scheduler
- zammad-volume-permissions
outils/outils-zammad-websocket-699f88f79-s2qmr
- [POP-110] Memory Current/Request (247Mi/128Mi) reached user 80% threshold (192%)
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- zammad-volume-permissions
- zammad-websocket
outils/rustdesk-hbbr-76bcc845bd-g96z5
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- hbbr
outils/rustdesk-hbbs-58467f8d74-p4fs2
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- hbbs
outils/wikijs-db-cluster-1
- bootstrap-controller
- postgres
outils/zammad-db-cluster-1
- bootstrap-controller
- postgres
trombinoscope/trombinoscope-69cd6c6d76-5tcx8
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- trombinoscope
val-system/cert-manager-cainjector-655bb66698-tkslc
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- cert-manager-cainjector
val-system/cert-manager-f97bfdc8c-kgsnl
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- cert-manager-controller
val-system/cert-manager-webhook-586666dcd7-ljjr8
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- cert-manager-webhook
val-system/cnpg-cloudnative-pg-67d4577fcb-w2rlf
- [POP-206] Pod has no associated PodDisruptionBudget
- manager
val-system/external-dns-67f7f7f7b5-fhqbr
- [POP-301] Connects to API Server? ServiceAccount token is mounted
val-system/external-secrets-685fb8b7d6-txm78
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- external-secrets
val-system/external-secrets-cert-controller-5c44687f97-5qbk5
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- cert-controller
val-system/external-secrets-webhook-64d9476d79-lvdhj
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- webhook
val-system/nginx-ingress-controller-ingress-nginx-controller-6d669d75qgbfj
- [POP-110] Memory Current/Request (104Mi/90Mi) reached user 80% threshold (115%)
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- controller
val-system/scaleway-certmanager-webhook-8c97d5557-wvjq7
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- scaleway-certmanager-webhook
val-system/traefik-688957bc9d-6rlk4
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- traefik
velero/velero-6747bf9f65-9qq2f
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- velero
- velero-plugin-for-aws
whoz-sync-middleware/redis-explorer-b764b9bf-bfc2x
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- redis-commander
whoz-sync-middleware/whoz-sync-middleware-app-7699dfbf4b-xtbpr
- [POP-110] Memory Current/Request (217Mi/128Mi) reached user 80% threshold (169%)
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- app
- db-explorer
- migrations
whoz-sync-middleware/whoz-sync-middleware-redis-57d7768845-mf7zb
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- init-redis
- redis

PODDISRUPTIONBUDGETS (12 SCANNED)

0 1 0 11 91%

gitlab/gitlab-minio-v1
- [POP-900] No pods match pdb selector: release=gitlab,app=minio,component=app

REPLICASETS (152 SCANNED)

0 0 0 152 100%

ROLES (27 SCANNED)

0 0 0 27 100%

ROLEBINDINGS (29 SCANNED)

0 0 0 29 100%

SECRETS (178 SCANNED)

0 0 120 58 100%

bcdc/bcdc-db-cluster-ca
- [POP-400] Used? Unable to locate resource reference
bcdc/bcdc-db-cluster-replication
- [POP-400] Used? Unable to locate resource reference
bcdc/bcdc-db-cluster-server
- [POP-400] Used? Unable to locate resource reference
bcdc/boondmanager-creds
- [POP-400] Used? Unable to locate resource reference
bcdc/db
- [POP-400] Used? Unable to locate resource reference
bcdc/sh.helm.release.v1.bcdc.v10
- [POP-400] Used? Unable to locate resource reference
bcdc/sh.helm.release.v1.bcdc.v11
- [POP-400] Used? Unable to locate resource reference
bcdc/sh.helm.release.v1.bcdc.v2
- [POP-400] Used? Unable to locate resource reference
bcdc/sh.helm.release.v1.bcdc.v3
- [POP-400] Used? Unable to locate resource reference
bcdc/sh.helm.release.v1.bcdc.v4
- [POP-400] Used? Unable to locate resource reference
bcdc/sh.helm.release.v1.bcdc.v5
- [POP-400] Used? Unable to locate resource reference
bcdc/sh.helm.release.v1.bcdc.v6
- [POP-400] Used? Unable to locate resource reference
bcdc/sh.helm.release.v1.bcdc.v7
- [POP-400] Used? Unable to locate resource reference
bcdc/sh.helm.release.v1.bcdc.v8
- [POP-400] Used? Unable to locate resource reference
bcdc/sh.helm.release.v1.bcdc.v9
- [POP-400] Used? Unable to locate resource reference
bcdc/showcase-api-keys
- [POP-400] Used? Unable to locate resource reference
botkube/sh.helm.release.v1.botkube.v1
- [POP-400] Used? Unable to locate resource reference
gitlab/garage-configure-script
- [POP-400] Used? Unable to locate resource reference
gitlab/garage-trivy-s3
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-gitlab-tls
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-minio-secret
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-minio-tls
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-registry-httpsecret
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-registry-secret
- [POP-401] Key "registry-auth.crt" used? Unable to locate key reference
gitlab/gitlab-wildcard-tls-5qgpz
- [POP-400] Used? Unable to locate resource reference
gitlab/gitlab-wildcard-tls-chain
- [POP-400] Used? Unable to locate resource reference
gitlab/registry
- [POP-400] Used? Unable to locate resource reference
gitlab/sh.helm.release.v1.garage.v1
- [POP-400] Used? Unable to locate resource reference
gitlab/sh.helm.release.v1.gitlab.v47
- [POP-400] Used? Unable to locate resource reference
gitlab/sh.helm.release.v1.gitlab.v48
- [POP-400] Used? Unable to locate resource reference
gitlab/sh.helm.release.v1.gitlab.v49
- [POP-400] Used? Unable to locate resource reference
gitlab/sh.helm.release.v1.gitlab.v50
- [POP-400] Used? Unable to locate resource reference
gitlab/sh.helm.release.v1.gitlab.v51
- [POP-400] Used? Unable to locate resource reference
gitlab/sh.helm.release.v1.gitlab.v52
- [POP-400] Used? Unable to locate resource reference
gitlab/sh.helm.release.v1.gitlab.v53
- [POP-400] Used? Unable to locate resource reference
gitlab/sh.helm.release.v1.gitlab.v54
- [POP-400] Used? Unable to locate resource reference
gitlab/sh.helm.release.v1.gitlab.v55
- [POP-400] Used? Unable to locate resource reference
gitlab/sh.helm.release.v1.gitlab.v56
- [POP-400] Used? Unable to locate resource reference
kube-system/cilium-ca
- [POP-400] Used? Unable to locate resource reference
monitoring/sh.helm.release.v1.alloy.v1
- [POP-400] Used? Unable to locate resource reference
monitoring/sh.helm.release.v1.alloy.v2
- [POP-400] Used? Unable to locate resource reference
monitoring/sh.helm.release.v1.oauth2-proxy.v1
- [POP-400] Used? Unable to locate resource reference
monitoring/sh.helm.release.v1.pushgateway.v1
- [POP-400] Used? Unable to locate resource reference
n8n/n8n.app.valeuriad.fr-tls-gmbkb
- [POP-400] Used? Unable to locate resource reference
n8n/n8n.local-tls
- [POP-400] Used? Unable to locate resource reference
n8n/sh.helm.release.v1.n8n.v1
- [POP-400] Used? Unable to locate resource reference
n8n/sh.helm.release.v1.n8n.v2
- [POP-400] Used? Unable to locate resource reference
n8n/sh.helm.release.v1.n8n.v3
- [POP-400] Used? Unable to locate resource reference
n8n/sh.helm.release.v1.n8n.v4
- [POP-400] Used? Unable to locate resource reference
n8n/sh.helm.release.v1.n8n.v5
- [POP-400] Used? Unable to locate resource reference
n8n/sh.helm.release.v1.n8n.v6
- [POP-400] Used? Unable to locate resource reference
n8n/sh.helm.release.v1.n8n.v7
- [POP-400] Used? Unable to locate resource reference
n8n/sh.helm.release.v1.n8n.v8
- [POP-400] Used? Unable to locate resource reference
outils/outils-redis
- [POP-401] Key "username" used? Unable to locate key reference
- [POP-401] Key "host" used? Unable to locate key reference
- [POP-401] Key "port" used? Unable to locate key reference
- [POP-401] Key "uri" used? Unable to locate key reference
outils/sh.helm.release.v1.outils.v14
- [POP-400] Used? Unable to locate resource reference
outils/sh.helm.release.v1.outils.v15
- [POP-400] Used? Unable to locate resource reference
outils/sh.helm.release.v1.outils.v16
- [POP-400] Used? Unable to locate resource reference
outils/sh.helm.release.v1.outils.v17
- [POP-400] Used? Unable to locate resource reference
outils/sh.helm.release.v1.outils.v18
- [POP-400] Used? Unable to locate resource reference
outils/sh.helm.release.v1.outils.v19
- [POP-400] Used? Unable to locate resource reference
outils/sh.helm.release.v1.outils.v20
- [POP-400] Used? Unable to locate resource reference
outils/sh.helm.release.v1.outils.v21
- [POP-400] Used? Unable to locate resource reference
outils/sh.helm.release.v1.outils.v22
- [POP-400] Used? Unable to locate resource reference
outils/sh.helm.release.v1.outils.v23
- [POP-400] Used? Unable to locate resource reference
outils/wikijs-db-cluster-ca
- [POP-400] Used? Unable to locate resource reference
outils/wikijs-db-cluster-replication
- [POP-400] Used? Unable to locate resource reference
outils/wikijs-db-cluster-server
- [POP-400] Used? Unable to locate resource reference
outils/wikijs-db-credentials
- [POP-401] Key "username" used? Unable to locate key reference
outils/zammad-db-cluster-ca
- [POP-400] Used? Unable to locate resource reference
outils/zammad-db-cluster-replication
- [POP-400] Used? Unable to locate resource reference
outils/zammad-db-cluster-server
- [POP-400] Used? Unable to locate resource reference
outils/zammad-db-credentials
- [POP-401] Key "username" used? Unable to locate key reference
streamlit/credentials
- [POP-400] Used? Unable to locate resource reference
streamlit/registry
- [POP-400] Used? Unable to locate resource reference
streamlit/sh.helm.release.v1.streamlit.v1
- [POP-400] Used? Unable to locate resource reference
trombinoscope/sh.helm.release.v1.trombinoscope.v1
- [POP-400] Used? Unable to locate resource reference
trombinoscope/sh.helm.release.v1.trombinoscope.v2
- [POP-400] Used? Unable to locate resource reference
trombinoscope/sh.helm.release.v1.trombinoscope.v3
- [POP-400] Used? Unable to locate resource reference
trombinoscope/sh.helm.release.v1.trombinoscope.v4
- [POP-400] Used? Unable to locate resource reference
trombinoscope/sh.helm.release.v1.trombinoscope.v5
- [POP-400] Used? Unable to locate resource reference
trombinoscope/sh.helm.release.v1.trombinoscope.v6
- [POP-400] Used? Unable to locate resource reference
trombinoscope/sh.helm.release.v1.trombinoscope.v7
- [POP-400] Used? Unable to locate resource reference
val-system/cert-manager-webhook-ca
- [POP-400] Used? Unable to locate resource reference
val-system/cnpg-ca-secret
- [POP-400] Used? Unable to locate resource reference
val-system/letsencrypt
- [POP-400] Used? Unable to locate resource reference
val-system/scaleway-certmanager-webhook-ca
- [POP-400] Used? Unable to locate resource reference
val-system/scwsm-secret
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.cert-manager.v1
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.cert-manager.v2
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.cnpg.v1
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.cnpg.v2
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.external-dns.v1
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.external-dns.v2
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.external-dns.v3
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.external-secrets.v1
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.external-secrets.v2
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.nginx-ingress-controller.v1
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.nginx-ingress-controller.v2
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.nginx-ingress-controller.v3
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.nginx-ingress-controller.v4
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.nginx-ingress-controller.v5
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.nginx-ingress-controller.v6
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.nginx-ingress-controller.v7
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.nginx-ingress-controller.v8
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.scaleway-certmanager-webhook.v1
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.traefik.v1
- [POP-400] Used? Unable to locate resource reference
val-system/sh.helm.release.v1.traefik.v2
- [POP-400] Used? Unable to locate resource reference
velero/sh.helm.release.v1.velero-ui.v1
- [POP-400] Used? Unable to locate resource reference
velero/sh.helm.release.v1.velero-ui.v2
- [POP-400] Used? Unable to locate resource reference
velero/sh.helm.release.v1.velero-ui.v3
- [POP-400] Used? Unable to locate resource reference
velero/sh.helm.release.v1.velero.v1
- [POP-400] Used? Unable to locate resource reference
velero/sh.helm.release.v1.velero.v2
- [POP-400] Used? Unable to locate resource reference
velero/velero-repo-credentials
- [POP-400] Used? Unable to locate resource reference
velero/velero-ui-passphrase
- [POP-400] Used? Unable to locate resource reference
whoz-sync-middleware/sh.helm.release.v1.whoz-sync-middleware.v1
- [POP-400] Used? Unable to locate resource reference
whoz-sync-middleware/sh.helm.release.v1.whoz-sync-middleware.v2
- [POP-400] Used? Unable to locate resource reference
whoz-sync-middleware/sh.helm.release.v1.whoz-sync-middleware.v3
- [POP-400] Used? Unable to locate resource reference
whoz-sync-middleware/sh.helm.release.v1.whoz-sync-middleware.v4
- [POP-400] Used? Unable to locate resource reference
whoz-sync-middleware/sh.helm.release.v1.whoz-sync-middleware.v5
- [POP-400] Used? Unable to locate resource reference
whoz-sync-middleware/sh.helm.release.v1.whoz-sync-middleware.v6
- [POP-400] Used? Unable to locate resource reference

SERVICES (72 SCANNED)

6 63 1 2 4%

bcdc/bcdc-back
- [POP-1102] Use of target port #80 for service port TCP:http:80. Prefer named port
- [POP-1109] Single endpoint is associated with this service
bcdc/bcdc-db-cluster-r
- [POP-1102] Use of target port #5432 for service port TCP:postgres:5432. Prefer named port
- [POP-1109] Single endpoint is associated with this service
bcdc/bcdc-db-cluster-ro
- [POP-1100] No pods match service selector
- [POP-1110] Match EP has no subsets
bcdc/bcdc-db-cluster-rw
- [POP-1102] Use of target port #5432 for service port TCP:postgres:5432. Prefer named port
- [POP-1109] Single endpoint is associated with this service
bcdc/bcdc-front
- [POP-1102] Use of target port #80 for service port TCP:http:80. Prefer named port
- [POP-1109] Single endpoint is associated with this service
bcdc/bcdc-phoenix
- [POP-1102] Use of target port #6006 for service port TCP::443. Prefer named port
- [POP-1109] Single endpoint is associated with this service
bcdc/bcdc-redis-headless
- [POP-1109] Single endpoint is associated with this service
bcdc/bcdc-redis-master
- [POP-1109] Single endpoint is associated with this service
bcdc/bcdc-superset
- [POP-1109] Single endpoint is associated with this service
botkube/botkube
- [POP-1101] Skip ports check. No explicit ports detected on pod botkube/botkube-9d98ddc6f-4n8q6
- [POP-1109] Single endpoint is associated with this service
gitlab/cm-acme-http-solver-8trmk
- [POP-1102] Use of target port #8089 for service port TCP:http:8089. Prefer named port
- [POP-1109] Single endpoint is associated with this service
- [POP-1104] Do you mean it? Type NodePort detected
gitlab/garage
- [POP-1109] Single endpoint is associated with this service
gitlab/garage-headless
- [POP-1109] Single endpoint is associated with this service
gitlab/gitlab-gitaly
- [POP-1109] Single endpoint is associated with this service
gitlab/gitlab-gitlab-exporter
- [POP-1109] Single endpoint is associated with this service
gitlab/gitlab-gitlab-pages
- [POP-1106] No target ports match service port TCP:http-gitlab-pages-proxy:8090
- [POP-1109] Single endpoint is associated with this service
gitlab/gitlab-gitlab-pages-metrics
- [POP-1109] Single endpoint is associated with this service
gitlab/gitlab-gitlab-shell
- [POP-1102] Use of target port #2222 for service port TCP:ssh:22. Prefer named port
- [POP-1109] Single endpoint is associated with this service
gitlab/gitlab-postgresql
- [POP-1109] Single endpoint is associated with this service
gitlab/gitlab-postgresql-hl
- [POP-1109] Single endpoint is associated with this service
gitlab/gitlab-postgresql-metrics
- [POP-1109] Single endpoint is associated with this service
gitlab/gitlab-redis-headless
- [POP-1109] Single endpoint is associated with this service
gitlab/gitlab-redis-master
- [POP-1109] Single endpoint is associated with this service
gitlab/gitlab-redis-metrics
- [POP-1109] Single endpoint is associated with this service
gitlab/gitlab-webservice-default
- [POP-1109] Single endpoint is associated with this service
kube-system/coredns
- [POP-1102] Use of target port #53 for service port UDP:dns:53. Prefer named port
- [POP-1102] Use of target port #53 for service port TCP:dns-tcp:53. Prefer named port
- [POP-1102] Use of target port #9153 for service port TCP:metrics:9153. Prefer named port
- [POP-1109] Single endpoint is associated with this service
kube-system/metrics-server
- [POP-1109] Single endpoint is associated with this service
monitoring/alloy
- [POP-1102] Use of target port #12345 for service port TCP:http-metrics:12345. Prefer named port
monitoring/oauth2-proxy
- [POP-1109] Single endpoint is associated with this service
monitoring/popeye-nginx
- [POP-1102] Use of target port #80 for service port TCP:http:80. Prefer named port
- [POP-1109] Single endpoint is associated with this service
monitoring/pushgateway-prometheus-pushgateway
- [POP-1102] Use of target port #9091 for service port TCP:http:9091. Prefer named port
- [POP-1109] Single endpoint is associated with this service
n8n/cm-acme-http-solver-w5x26
- [POP-1102] Use of target port #8089 for service port TCP:http:8089. Prefer named port
- [POP-1109] Single endpoint is associated with this service
- [POP-1104] Do you mean it? Type NodePort detected
n8n/n8n
- [POP-1109] Single endpoint is associated with this service
outils/glpi
- [POP-1109] Single endpoint is associated with this service
outils/glpi-mysql
- [POP-1102] Use of target port #3306 for service port TCP:mysql:3306. Prefer named port
- [POP-1109] Single endpoint is associated with this service
outils/outils-elasticsearch
- [POP-1102] Use of target port #9300 for service port TCP:tcp-transport:9300. Prefer named port
- [POP-1109] Single endpoint is associated with this service
outils/outils-elasticsearch-master-hl
- [POP-1109] Single endpoint is associated with this service
outils/outils-memcached
- [POP-1109] Single endpoint is associated with this service
outils/outils-redis
- [POP-1109] Single endpoint is associated with this service
outils/outils-redis-headless
- [POP-1109] Single endpoint is associated with this service
outils/outils-wiki
- [POP-1109] Single endpoint is associated with this service
outils/outils-zammad-nginx
- [POP-1109] Single endpoint is associated with this service
outils/outils-zammad-railsserver
- [POP-1102] Use of target port #3000 for service port TCP:http:3000. Prefer named port
- [POP-1109] Single endpoint is associated with this service
outils/outils-zammad-websocket
- [POP-1102] Use of target port #6042 for service port TCP:http:6042. Prefer named port
- [POP-1109] Single endpoint is associated with this service
outils/rustdesk-hbbr
- [POP-1109] Single endpoint is associated with this service
outils/rustdesk-hbbs
- [POP-1109] Single endpoint is associated with this service
outils/wikijs-db-cluster-r
- [POP-1102] Use of target port #5432 for service port TCP:postgres:5432. Prefer named port
- [POP-1109] Single endpoint is associated with this service
outils/wikijs-db-cluster-ro
- [POP-1100] No pods match service selector
- [POP-1110] Match EP has no subsets
outils/wikijs-db-cluster-rw
- [POP-1102] Use of target port #5432 for service port TCP:postgres:5432. Prefer named port
- [POP-1109] Single endpoint is associated with this service
outils/zammad-db-cluster-r
- [POP-1102] Use of target port #5432 for service port TCP:postgres:5432. Prefer named port
- [POP-1109] Single endpoint is associated with this service
outils/zammad-db-cluster-ro
- [POP-1100] No pods match service selector
- [POP-1110] Match EP has no subsets
outils/zammad-db-cluster-rw
- [POP-1102] Use of target port #5432 for service port TCP:postgres:5432. Prefer named port
- [POP-1109] Single endpoint is associated with this service
streamlit/streamlit
- [POP-1100] No pods match service selector
- [POP-1110] Match EP has no subsets
trombinoscope/trombinoscope
- [POP-1102] Use of target port #5000 for service port TCP:https:443. Prefer named port
- [POP-1109] Single endpoint is associated with this service
val-system/cert-manager
- [POP-1109] Single endpoint is associated with this service
val-system/cert-manager-cainjector
- [POP-1102] Use of target port #9402 for service port TCP:http-metrics:9402. Prefer named port
- [POP-1109] Single endpoint is associated with this service
val-system/cert-manager-webhook
- [POP-1109] Single endpoint is associated with this service
val-system/cnpg-webhook-service
- [POP-1109] Single endpoint is associated with this service
val-system/external-dns
- [POP-1109] Single endpoint is associated with this service
val-system/external-secrets-webhook
- [POP-1102] Use of target port #10250 for service port TCP:webhook:443. Prefer named port
- [POP-1109] Single endpoint is associated with this service
val-system/nginx-ingress-controller-ingress-nginx-controller
- [POP-1109] Single endpoint is associated with this service
- [POP-1103] Type LoadBalancer detected. Could be expensive
- [POP-1107] LoadBalancer detected but service sets externalTrafficPolicy to "Cluster"
val-system/nginx-ingress-controller-ingress-nginx-controller-admission
- [POP-1109] Single endpoint is associated with this service
val-system/scaleway-certmanager-webhook
- [POP-1109] Single endpoint is associated with this service
val-system/traefik
- [POP-1109] Single endpoint is associated with this service
- [POP-1103] Type LoadBalancer detected. Could be expensive
velero/velero
- [POP-1109] Single endpoint is associated with this service
velero/velero-ui
- [POP-1100] No pods match service selector
- [POP-1110] Match EP has no subsets
whoz-sync-middleware/redis-explorer-svc
- [POP-1102] Use of target port #8081 for service port TCP::80. Prefer named port
- [POP-1109] Single endpoint is associated with this service
whoz-sync-middleware/whoz-sync-middleware
- [POP-1102] Use of target port #3333 for service port TCP:http:80. Prefer named port
- [POP-1109] Single endpoint is associated with this service
whoz-sync-middleware/whoz-sync-middleware-db-explorer
- [POP-1102] Use of target port #8001 for service port TCP:http-explorer:80. Prefer named port
- [POP-1109] Single endpoint is associated with this service
whoz-sync-middleware/whoz-sync-middleware-redis
- [POP-1102] Use of target port #6379 for service port TCP::6379. Prefer named port
- [POP-1109] Single endpoint is associated with this service

SERVICEACCOUNTS (92 SCANNED)

0 12 1 79 86%

bcdc/bcdc-redis
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
monitoring/alloy
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
monitoring/oauth2-proxy
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
monitoring/popeye
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
monitoring/pushgateway-prometheus-pushgateway
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
n8n/n8n
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
streamlit/streamlit
- [POP-400] Used? Unable to locate resource reference
val-system/cert-manager
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
val-system/cert-manager-cainjector
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
val-system/cert-manager-webhook
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
val-system/nginx-ingress-controller-ingress-nginx
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
velero/velero-server
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
velero/velero-ui
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials

STATEFULSETS (8 SCANNED)

0 6 0 2 25%

bcdc/bcdc-phoenix
- bcdc-phoenix
bcdc/bcdc-redis-master
- redis
gitlab/garage
- garage
gitlab/gitlab-gitaly
- [POP-505] At current load, Memory under allocated. Current:918Mi vs Requested:200Mi (459.00%)
- certificates
- configure
- gitaly
gitlab/gitlab-postgresql
- metrics
- postgresql
gitlab/gitlab-redis-master
- [POP-503] At current load, CPU under allocated. Current:26m vs Requested:10m (260.00%)
- metrics
- redis