Popeye Scan Report
Scanned
n/a/n/a
2026-04-15T13:00:09Z
B
81
CILIUMCLUSTERWIDENETWORKPOLICIES (0 SCANNED)
0
0
0
0
100%
CILIUMENDPOINTS (39 SCANNED)
4
0
0
35
89%
-
les-projets-cagnottes/les-projets-cagnottes-slack-events-catcher-5f966c49cc-zbb6c
- [POP-1703] Pod owner is not in a running state: les-projets-cagnottes/les-projets-cagnottes-slack-events-catcher-5f966c49cc-zbb6c (CrashLoopBackOff)
-
materiel/materiel-snipeit-requestcleanup-29604300-46rkc
- [POP-1703] Pod owner is not in a running state: materiel/materiel-snipeit-requestcleanup-29604300-46rkc (ContainerCreating)
-
monitoring/popeye-29604300-2rtgk
- [POP-1703] Pod owner is not in a running state: monitoring/popeye-29604300-2rtgk (ContainerCreating)
-
velero/velero-ui-6ff554765b-xht62
- [POP-1703] Pod owner is not in a running state: velero/velero-ui-6ff554765b-xht62 (CrashLoopBackOff)
CILIUMIDENTITIES (39 SCANNED)
0
2
0
37
94%
-
materiel/17864
- [POP-1600] Stale? unable to locate matching Cilium Endpoint
-
monitoring/15735
- [POP-1600] Stale? unable to locate matching Cilium Endpoint
CILIUMNETWORKPOLICIES (0 SCANNED)
0
0
0
0
100%
CLUSTERS (1 SCANNED)
0
0
0
1
100%
-
Version
- [POP-406] K8s version OK
CLUSTERROLES (106 SCANNED)
0
0
5
101
100%
-
cert-manager-cluster-view
- [POP-400] Used? Unable to locate resource reference
-
cnpg-cloudnative-pg-edit
- [POP-400] Used? Unable to locate resource reference
-
cnpg-cloudnative-pg-view
- [POP-400] Used? Unable to locate resource reference
-
external-secrets-servicebindings
- [POP-400] Used? Unable to locate resource reference
-
velero-ui
- [POP-400] Used? Unable to locate resource reference
CLUSTERROLEBINDINGS (88 SCANNED)
0
4
0
84
95%
-
system:controller:route-controller
- [POP-1300] References a ServiceAccount (kube-system/route-controller) which does not exist
-
system:controller:selinux-warning-controller
- [POP-1300] References a ServiceAccount (kube-system/selinux-warning-controller) which does not exist
-
system:controller:service-controller
- [POP-1300] References a ServiceAccount (kube-system/service-controller) which does not exist
-
system:kube-dns
- [POP-1300] References a ServiceAccount (kube-system/kube-dns) which does not exist
CONFIGMAPS (48 SCANNED)
0
0
17
31
100%
-
botkube/botkube-system
- [POP-400] Used? Unable to locate resource reference
-
cooptation/cnpg-default-monitoring
- [POP-400] Used? Unable to locate resource reference
-
gitlab/gitlab-gitlab-upgrade-check
- [POP-400] Used? Unable to locate resource reference
-
intranet/intranet-mysql-backup
- [POP-400] Used? Unable to locate resource reference
-
intranet/intranet-mysql-test
- [POP-400] Used? Unable to locate resource reference
-
kube-system/cluster-autoscaler-status
- [POP-400] Used? Unable to locate resource reference
-
kube-system/extension-apiserver-authentication
- [POP-400] Used? Unable to locate resource reference
-
kube-system/kube-apiserver-legacy-service-account-token-tracking
- [POP-400] Used? Unable to locate resource reference
-
kube-system/kube-proxy
- [POP-400] Used? Unable to locate resource reference
-
les-projets-cagnottes/cnpg-default-monitoring
- [POP-400] Used? Unable to locate resource reference
-
materiel/materiel-mysql-test
- [POP-400] Used? Unable to locate resource reference
-
val-system/cnpg-controller-manager-config
- [POP-400] Used? Unable to locate resource reference
-
val-system/cnpg-default-monitoring
- [POP-400] Used? Unable to locate resource reference
-
val-system/nginx-ingress-controller-ingress-nginx-controller
- [POP-400] Used? Unable to locate resource reference
-
velero/ingress-host-modifier
- [POP-400] Used? Unable to locate resource reference
-
velero/velero-repo-maintenance
- [POP-400] Used? Unable to locate resource reference
-
velero/velero-ui
- [POP-400] Used? Unable to locate resource reference
CRONJOBS (5 SCANNED)
0
4
0
1
20%
-
kivaou/bookings-snapshot
- [POP-1501] No active jobs detected
- trigger-bookings-snapshot
- [POP-106] No resources requests/limits defined
kivaou/kivaou-cron-confirmation-booking
- [POP-1501] No active jobs detected
- [POP-106] No resources requests/limits defined
kube-system/hubble-generate-certs
- [POP-1501] No active jobs detected
- [POP-106] No resources requests/limits defined
materiel/materiel-snipeit-requestcleanup
- [POP-106] No resources requests/limits defined
DAEMONSETS (5 SCANNED)
1
4
0
0
0%
-
kube-system/cilium
- [POP-505] At current load, Memory under allocated. Current:1155Mi vs Requested:330Mi (350.00%)
- apply-sysctl-overwrites
- [POP-106] No resources requests/limits defined
- cilium-agent
- [POP-106] No resources requests/limits defined
- clean-cilium-state
- [POP-107] No resource limits defined
- config
- [POP-106] No resources requests/limits defined
- install-cni-binaries
- [POP-107] No resource limits defined
- mount-bpf-fs
- [POP-106] No resources requests/limits defined
- mount-cgroup
- [POP-106] No resources requests/limits defined
kube-system/csi-node
- [POP-106] No resources requests/limits defined
- [POP-106] No resources requests/limits defined
kube-system/konnectivity-agent
- [POP-106] No resources requests/limits defined
kube-system/kube-proxy
- [POP-508] No pods match controller selector: app=kube-proxy
- [POP-107] No resource limits defined
monitoring/alloy
- [POP-505] At current load, Memory under allocated. Current:1257Mi vs Requested:150Mi (838.00%)
- [POP-106] No resources requests/limits defined
- [POP-107] No resource limits defined
DEPLOYMENTS (33 SCANNED)
3
25
0
5
15%
-
botkube/botkube
- botkube
- [POP-106] No resources requests/limits defined
cooptation/cooptation-api
- [POP-106] No resources requests/limits defined
- [POP-106] No resources requests/limits defined
cooptation/cooptation-web
- [POP-106] No resources requests/limits defined
intranet/intranet-mysql
- [POP-107] No resource limits defined
- [POP-107] No resource limits defined
intranet/intranet-wordpress
- [POP-107] No resource limits defined
- [POP-107] No resource limits defined
kivaou/kivaou-front
- [POP-106] No resources requests/limits defined
kivaou/kivaou-mongodb
- [POP-107] No resource limits defined
kube-system/cilium-operator
- [POP-106] No resources requests/limits defined
kube-system/metrics-server
- [POP-107] No resource limits defined
les-projets-cagnottes/les-projets-cagnottes-api
- [POP-106] No resources requests/limits defined
les-projets-cagnottes/les-projets-cagnottes-slack-events-catcher
- [POP-501] Unhealthy 1 desired but have 0 available
materiel/materiel-mysql
- [POP-107] No resource limits defined
- [POP-107] No resource limits defined
materiel/materiel-snipeit
- [POP-100] Untagged docker image in use
- [POP-106] No resources requests/limits defined
- [POP-106] No resources requests/limits defined
monitoring/oauth2-proxy
- [POP-106] No resources requests/limits defined
monitoring/popeye-nginx
- [POP-106] No resources requests/limits defined
val-system/cert-manager
- [POP-106] No resources requests/limits defined
val-system/cert-manager-cainjector
- [POP-106] No resources requests/limits defined
val-system/cert-manager-webhook
- [POP-106] No resources requests/limits defined
val-system/cnpg-cloudnative-pg
- [POP-106] No resources requests/limits defined
val-system/emberstack-reflector
- [POP-106] No resources requests/limits defined
val-system/external-secrets
- [POP-106] No resources requests/limits defined
val-system/external-secrets-cert-controller
- [POP-106] No resources requests/limits defined
val-system/external-secrets-webhook
- [POP-106] No resources requests/limits defined
val-system/nginx-ingress-controller-ingress-nginx-controller
- [POP-107] No resource limits defined
val-system/scaleway-certmanager-webhook
- [POP-106] No resources requests/limits defined
val-system/traefik
- [POP-106] No resources requests/limits defined
velero/velero
- [POP-106] No resources requests/limits defined
- [POP-106] No resources requests/limits defined
velero/velero-ui
- [POP-501] Unhealthy 1 desired but have 0 available
- [POP-106] No resources requests/limits defined
GATEWAYS (0 SCANNED)
0
0
0
0
100%
GATEWAYCLASSES (0 SCANNED)
0
0
0
0
100%
HORIZONTALPODAUTOSCALERS (0 SCANNED)
0
0
0
0
100%
HTTPROUTES (0 SCANNED)
0
0
0
0
100%
INGRESSES (8 SCANNED)
0
0
6
2
100%
-
cooptation/cooptation
- [POP-1403] Ingress backend uses a port#, prefer a named port: 80
- [POP-1403] Ingress backend uses a port#, prefer a named port: 80
-
kivaou/kivaou
- [POP-1403] Ingress backend uses a port#, prefer a named port: 80
- [POP-1403] Ingress backend uses a port#, prefer a named port: 8080
- [POP-1403] Ingress backend uses a port#, prefer a named port: 8080
-
les-projets-cagnottes/les-projets-cagnottes
- [POP-1403] Ingress backend uses a port#, prefer a named port: 80
- [POP-1403] Ingress backend uses a port#, prefer a named port: 80
- [POP-1403] Ingress backend uses a port#, prefer a named port: 80
- [POP-1403] Ingress backend uses a port#, prefer a named port: 80
-
monitoring/oauth2-proxy
- [POP-1403] Ingress backend uses a port#, prefer a named port: 80
-
monitoring/popeye-report
- [POP-1403] Ingress backend uses a port#, prefer a named port: 80
-
velero/velero-ui
- [POP-1403] Ingress backend uses a port#, prefer a named port: 3000
JOBS (19 SCANNED)
0
14
0
5
26%
-
gitlab/gitlab-migrations-283f682
- certificates
- [POP-107] No resource limits defined
- configure
- [POP-107] No resource limits defined
- migrations
- [POP-107] No resource limits defined
gitlab/gitlab-minio-create-buckets-b2dffbe
- [POP-107] No resource limits defined
kivaou/bookings-snapshot-29473020
- [POP-106] No resources requests/limits defined
kivaou/bookings-snapshot-29474460
- [POP-106] No resources requests/limits defined
kivaou/bookings-snapshot-29475900
- [POP-106] No resources requests/limits defined
kivaou/bookings-snapshot-29604060
- [POP-106] No resources requests/limits defined
kivaou/kivaou-cron-confirmation-booking-29473020
- [POP-106] No resources requests/limits defined
kivaou/kivaou-cron-confirmation-booking-29474460
- [POP-106] No resources requests/limits defined
kivaou/kivaou-cron-confirmation-booking-29475900
- [POP-106] No resources requests/limits defined
kivaou/kivaou-cron-confirmation-booking-29604060
- [POP-106] No resources requests/limits defined
materiel/materiel-snipeit-requestcleanup-29604120
- [POP-106] No resources requests/limits defined
materiel/materiel-snipeit-requestcleanup-29604180
- [POP-106] No resources requests/limits defined
materiel/materiel-snipeit-requestcleanup-29604240
- [POP-106] No resources requests/limits defined
materiel/materiel-snipeit-requestcleanup-29604300
- [POP-106] No resources requests/limits defined
NAMESPACES (16 SCANNED)
0
0
0
16
100%
NETWORKPOLICIES (3 SCANNED)
0
0
0
3
100%
NODES (3 SCANNED)
0
0
0
3
100%
PERSISTENTVOLUMES (11 SCANNED)
0
0
0
11
100%
PERSISTENTVOLUMECLAIMS (11 SCANNED)
0
0
1
10
100%
-
cooptation/data-cooptation-postgresql-0
- [POP-400] Used? Unable to locate resource reference
PODS (94 SCANNED)
27
67
0
0
0%
-
botkube/botkube-9b8db96bc-fshjq
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- botkube
- [POP-106] No resources requests/limits defined
- [POP-105] Liveness uses a port#, prefer a named port
- [POP-105] Readiness uses a port#, prefer a named port
botkube/botkube-9b8db96bc-pbdf4
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-106] No resources requests/limits defined
- [POP-105] Liveness uses a port#, prefer a named port
- [POP-105] Readiness uses a port#, prefer a named port
botkube/botkube-9b8db96bc-xhz6l
- [POP-207] Pod is in an unhappy phase (Failed)
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-106] No resources requests/limits defined
- [POP-105] Liveness uses a port#, prefer a named port
- [POP-105] Readiness uses a port#, prefer a named port
cooptation/cooptation-api-54956dcbcc-2bshq
- [POP-207] Pod is in an unhappy phase (Failed)
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
cooptation/cooptation-api-54956dcbcc-k5q5h
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
cooptation/cooptation-api-54956dcbcc-ksvwg
- [POP-207] Pod is in an unhappy phase (Failed)
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
cooptation/cooptation-db-cluster-1
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-106] No resources requests/limits defined
- [POP-106] No resources requests/limits defined
- [POP-105] Liveness uses a port#, prefer a named port
- [POP-105] Readiness uses a port#, prefer a named port
cooptation/cooptation-web-7c44594f66-b8n2d
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
cooptation/cooptation-web-7c44594f66-qzsjc
- [POP-207] Pod is in an unhappy phase (Failed)
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
cooptation/cooptation-web-7c44594f66-wkt2r
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
intranet/intranet-mysql-6f4dcff48c-xfw2n
- [POP-110] Memory Current/Request (218Mi/256Mi) reached user 80% threshold (85%)
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-107] No resource limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-107] No resource limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
intranet/intranet-wordpress-7f8cc7f94-nm8l6
- [POP-107] No resource limits defined
- [POP-107] No resource limits defined
kivaou/kivaou-back-5b99d4f9bb-f4jkj
- [POP-207] Pod is in an unhappy phase (Failed)
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-306] Container could be running as root user. Check SecurityContext/Image
kivaou/kivaou-back-5b99d4f9bb-jrt5r
- [POP-207] Pod is in an unhappy phase (Failed)
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-306] Container could be running as root user. Check SecurityContext/Image
kivaou/kivaou-back-5b99d4f9bb-wmjg2
- [POP-110] Memory Current/Request (279Mi/200Mi) reached user 80% threshold (139%)
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-306] Container could be running as root user. Check SecurityContext/Image
kivaou/kivaou-front-845b8b9fc7-5z6rh
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
kivaou/kivaou-front-845b8b9fc7-dv5ql
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
kivaou/kivaou-front-845b8b9fc7-mgffb
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
kivaou/kivaou-mongodb-786887bfc5-5sg2z
- [POP-207] Pod is in an unhappy phase (Failed)
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-107] No resource limits defined
kivaou/kivaou-mongodb-786887bfc5-wwgb6
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-107] No resource limits defined
kivaou/kivaou-mongodb-786887bfc5-xdr5v
- [POP-207] Pod is in an unhappy phase (Failed)
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-107] No resource limits defined
kube-system/cilium-56c76
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-205] Pod was restarted (66) times
- [POP-106] No resources requests/limits defined
- [POP-105] Liveness uses a port#, prefer a named port
- [POP-105] Readiness uses a port#, prefer a named port
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-107] No resource limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-205] Pod was restarted (66) times
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-107] No resource limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
kube-system/cilium-operator-68758d8dc7-dmckj
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-205] Pod was restarted (136) times
- [POP-106] No resources requests/limits defined
- [POP-105] Liveness uses a port#, prefer a named port
- [POP-105] Readiness uses a port#, prefer a named port
- [POP-306] Container could be running as root user. Check SecurityContext/Image
kube-system/cilium-w5jp5
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-205] Pod was restarted (111) times
- [POP-106] No resources requests/limits defined
- [POP-105] Liveness uses a port#, prefer a named port
- [POP-105] Readiness uses a port#, prefer a named port
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-107] No resource limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-205] Pod was restarted (111) times
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-107] No resource limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
kube-system/cilium-w92xw
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-205] Pod was restarted (110) times
- [POP-106] No resources requests/limits defined
- [POP-105] Liveness uses a port#, prefer a named port
- [POP-105] Readiness uses a port#, prefer a named port
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-107] No resource limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-205] Pod was restarted (110) times
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-107] No resource limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
kube-system/coredns-64bc75b9b-sszzc
- [POP-110] Memory Current/Request (87Mi/70Mi) reached user 80% threshold (124%)
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-105] Liveness uses a port#, prefer a named port
- [POP-105] Readiness uses a port#, prefer a named port
- [POP-306] Container could be running as root user. Check SecurityContext/Image
kube-system/csi-node-7mmlf
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-205] Pod was restarted (110) times
- [POP-106] No resources requests/limits defined
- [POP-102] No probes defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-205] Pod was restarted (110) times
- [POP-106] No resources requests/limits defined
- [POP-102] No probes defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
kube-system/csi-node-qqth7
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-205] Pod was restarted (66) times
- [POP-106] No resources requests/limits defined
- [POP-102] No probes defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-205] Pod was restarted (66) times
- [POP-106] No resources requests/limits defined
- [POP-102] No probes defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
kube-system/csi-node-xm6sj
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-205] Pod was restarted (111) times
- [POP-106] No resources requests/limits defined
- [POP-102] No probes defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-205] Pod was restarted (111) times
- [POP-106] No resources requests/limits defined
- [POP-102] No probes defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
kube-system/konnectivity-agent-7xdn7
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-205] Pod was restarted (110) times
- [POP-106] No resources requests/limits defined
- [POP-105] Liveness uses a port#, prefer a named port
- [POP-104] No readiness probe
- [POP-306] Container could be running as root user. Check SecurityContext/Image
kube-system/konnectivity-agent-fncpn
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-205] Pod was restarted (111) times
- [POP-106] No resources requests/limits defined
- [POP-105] Liveness uses a port#, prefer a named port
- [POP-104] No readiness probe
- [POP-306] Container could be running as root user. Check SecurityContext/Image
kube-system/konnectivity-agent-p5d6z
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-205] Pod was restarted (66) times
- [POP-106] No resources requests/limits defined
- [POP-105] Liveness uses a port#, prefer a named port
- [POP-104] No readiness probe
- [POP-306] Container could be running as root user. Check SecurityContext/Image
kube-system/metrics-server-7c4f55784d-qq8xc
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-107] No resource limits defined
les-projets-cagnottes/les-projets-cagnottes-api-56698cf6d-b6szb
- [POP-207] Pod is in an unhappy phase (Failed)
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-106] No resources requests/limits defined
les-projets-cagnottes/les-projets-cagnottes-api-56698cf6d-npcfs
- [POP-207] Pod is in an unhappy phase (Failed)
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-106] No resources requests/limits defined
les-projets-cagnottes/les-projets-cagnottes-api-56698cf6d-zk6vr
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-106] No resources requests/limits defined
les-projets-cagnottes/les-projets-cagnottes-slack-events-catcher-5f966c49cc-zbb6c
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-203] Pod is waiting [0/1] CrashLoopBackOff
- [POP-306] Container could be running as root user. Check SecurityContext/Image
les-projets-cagnottes/les-projets-cagnottes-web-6d9bb9766d-4kmnn
- [POP-207] Pod is in an unhappy phase (Failed)
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-306] Container could be running as root user. Check SecurityContext/Image
les-projets-cagnottes/les-projets-cagnottes-web-6d9bb9766d-cnmsp
- [POP-207] Pod is in an unhappy phase (Failed)
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-306] Container could be running as root user. Check SecurityContext/Image
les-projets-cagnottes/les-projets-cagnottes-web-6d9bb9766d-lmnmm
- [POP-109] CPU Current/Request (1m/1m) reached user 80% threshold (100%)
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-306] Container could be running as root user. Check SecurityContext/Image
les-projets-cagnottes/lesprojetscagnottes-db-cluster-1
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-106] No resources requests/limits defined
- [POP-106] No resources requests/limits defined
- [POP-105] Liveness uses a port#, prefer a named port
- [POP-105] Readiness uses a port#, prefer a named port
materiel/materiel-mysql-5688cd4747-ckh7l
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-107] No resource limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-107] No resource limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
materiel/materiel-mysql-5688cd4747-l64tt
- [POP-110] Memory Current/Request (222Mi/256Mi) reached user 80% threshold (86%)
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-107] No resource limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-107] No resource limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
materiel/materiel-mysql-5688cd4747-t9w4b
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-107] No resource limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-107] No resource limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
materiel/materiel-snipeit-c4bcdffbd-svv48
- [POP-110] Memory Current/Request (148Mi/128Mi) reached user 80% threshold (115%)
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-100] Untagged docker image in use
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-105] Liveness uses a port#, prefer a named port
- [POP-105] Readiness uses a port#, prefer a named port
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
materiel/materiel-snipeit-requestcleanup-29604120-lncrn
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
materiel/materiel-snipeit-requestcleanup-29604180-f2cdp
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
materiel/materiel-snipeit-requestcleanup-29604240-hbhxb
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
materiel/materiel-snipeit-requestcleanup-29604300-46rkc
- [POP-207] Pod is in an unhappy phase (Pending)
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-203] Pod is waiting [0/1] ContainerCreating
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
monitoring/alloy-l7mvr
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-205] Pod was restarted (23) times
- [POP-106] No resources requests/limits defined
- [POP-103] No liveness probe
- [POP-105] Readiness uses a port#, prefer a named port
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-205] Pod was restarted (23) times
- [POP-107] No resource limits defined
- [POP-102] No probes defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
monitoring/alloy-m4lgs
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-205] Pod was restarted (19) times
- [POP-106] No resources requests/limits defined
- [POP-103] No liveness probe
- [POP-105] Readiness uses a port#, prefer a named port
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-205] Pod was restarted (19) times
- [POP-107] No resource limits defined
- [POP-102] No probes defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
monitoring/alloy-nh8xg
- [POP-110] Memory Current/Request (46Mi/50Mi) reached user 80% threshold (92%)
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-103] No liveness probe
- [POP-105] Readiness uses a port#, prefer a named port
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-107] No resource limits defined
- [POP-102] No probes defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
monitoring/oauth2-proxy-55588c97ff-cgszz
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-106] No resources requests/limits defined
monitoring/oauth2-proxy-55588c97ff-clrbn
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-106] No resources requests/limits defined
monitoring/oauth2-proxy-55588c97ff-zwrz9
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-106] No resources requests/limits defined
monitoring/popeye-29604120-rzp6c
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-306] Container could be running as root user. Check SecurityContext/Image
monitoring/popeye-29604180-fd69j
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-306] Container could be running as root user. Check SecurityContext/Image
monitoring/popeye-29604240-snl7t
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-306] Container could be running as root user. Check SecurityContext/Image
monitoring/popeye-29604300-2rtgk
- [POP-207] Pod is in an unhappy phase (Pending)
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-203] Pod is waiting [0/1] ContainerCreating
- [POP-306] Container could be running as root user. Check SecurityContext/Image
monitoring/popeye-nginx-5f97d756d-995bh
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-102] No probes defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
monitoring/popeye-nginx-5f97d756d-kcd92
- [POP-207] Pod is in an unhappy phase (Failed)
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-102] No probes defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
monitoring/popeye-nginx-5f97d756d-tsgtw
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-300] Uses "default" ServiceAccount
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-102] No probes defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
monitoring/pushgateway-prometheus-pushgateway-554fb89dfd-4xxxr
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-105] Liveness uses a port#, prefer a named port
- [POP-105] Readiness uses a port#, prefer a named port
monitoring/pushgateway-prometheus-pushgateway-554fb89dfd-dgvlt
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-105] Liveness uses a port#, prefer a named port
- [POP-105] Readiness uses a port#, prefer a named port
val-system/cert-manager-7ccbc46c67-knkj5
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-106] No resources requests/limits defined
- [POP-104] No readiness probe
val-system/cert-manager-7ccbc46c67-wqs5z
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-106] No resources requests/limits defined
- [POP-104] No readiness probe
val-system/cert-manager-cainjector-655bb66698-ngsnx
- [POP-207] Pod is in an unhappy phase (Failed)
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-106] No resources requests/limits defined
- [POP-102] No probes defined
val-system/cert-manager-cainjector-655bb66698-znlbj
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-106] No resources requests/limits defined
- [POP-102] No probes defined
val-system/cert-manager-webhook-586666dcd7-d94q4
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-106] No resources requests/limits defined
val-system/cnpg-cloudnative-pg-6676594c84-dc7nr
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-106] No resources requests/limits defined
- [POP-105] Liveness uses a port#, prefer a named port
- [POP-105] Readiness uses a port#, prefer a named port
val-system/cnpg-cloudnative-pg-6676594c84-rr9t9
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-106] No resources requests/limits defined
- [POP-105] Liveness uses a port#, prefer a named port
- [POP-105] Readiness uses a port#, prefer a named port
val-system/cnpg-cloudnative-pg-6676594c84-xdqjz
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-106] No resources requests/limits defined
- [POP-105] Liveness uses a port#, prefer a named port
- [POP-105] Readiness uses a port#, prefer a named port
val-system/emberstack-reflector-6b9f8766d-b552r
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-106] No resources requests/limits defined
val-system/emberstack-reflector-6b9f8766d-vhfgk
- [POP-207] Pod is in an unhappy phase (Failed)
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-106] No resources requests/limits defined
val-system/external-dns-747b8cd76c-ztqpq
- [POP-110] Memory Current/Request (117Mi/128Mi) reached user 80% threshold (91%)
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-205] Pod was restarted (10) times
val-system/external-secrets-bfb7c98c4-2dxt5
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-106] No resources requests/limits defined
- [POP-102] No probes defined
val-system/external-secrets-bfb7c98c4-z4zwv
- [POP-207] Pod is in an unhappy phase (Failed)
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-106] No resources requests/limits defined
- [POP-102] No probes defined
val-system/external-secrets-cert-controller-5c44687f97-5qtjt
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-106] No resources requests/limits defined
- [POP-103] No liveness probe
- [POP-105] Readiness uses a port#, prefer a named port
val-system/external-secrets-cert-controller-5c44687f97-tpgxr
- [POP-207] Pod is in an unhappy phase (Failed)
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-106] No resources requests/limits defined
- [POP-103] No liveness probe
- [POP-105] Readiness uses a port#, prefer a named port
val-system/external-secrets-webhook-64d9476d79-24qvj
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-106] No resources requests/limits defined
- [POP-103] No liveness probe
- [POP-105] Readiness uses a port#, prefer a named port
val-system/external-secrets-webhook-64d9476d79-lsshn
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-106] No resources requests/limits defined
- [POP-103] No liveness probe
- [POP-105] Readiness uses a port#, prefer a named port
val-system/nginx-ingress-controller-ingress-nginx-controller-784b649787lsn
- [POP-207] Pod is in an unhappy phase (Failed)
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-107] No resource limits defined
- [POP-105] Liveness uses a port#, prefer a named port
- [POP-105] Readiness uses a port#, prefer a named port
val-system/nginx-ingress-controller-ingress-nginx-controller-784b6497fs22r
- [POP-207] Pod is in an unhappy phase (Failed)
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-107] No resource limits defined
- [POP-105] Liveness uses a port#, prefer a named port
- [POP-105] Readiness uses a port#, prefer a named port
val-system/nginx-ingress-controller-ingress-nginx-controller-784b6497mnbwq
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-107] No resource limits defined
- [POP-105] Liveness uses a port#, prefer a named port
- [POP-105] Readiness uses a port#, prefer a named port
val-system/scaleway-certmanager-webhook-d965f986f-8lppz
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
val-system/scaleway-certmanager-webhook-d965f986f-8wswg
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
val-system/traefik-7bd6bdbf5d-rgvvg
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-106] No resources requests/limits defined
- [POP-105] Liveness uses a port#, prefer a named port
- [POP-105] Readiness uses a port#, prefer a named port
val-system/traefik-7bd6bdbf5d-x4zrm
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-106] No resources requests/limits defined
- [POP-105] Liveness uses a port#, prefer a named port
- [POP-105] Readiness uses a port#, prefer a named port
velero/velero-6747bf9f65-dvkv2
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
velero/velero-6747bf9f65-k2djn
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
velero/velero-6747bf9f65-wm984
- [POP-207] Pod is in an unhappy phase (Failed)
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
velero/velero-ui-6ff554765b-p7szm
- [POP-207] Pod is in an unhappy phase (Failed)
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
velero/velero-ui-6ff554765b-q2xgq
- [POP-207] Pod is in an unhappy phase (Failed)
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
velero/velero-ui-6ff554765b-xht62
- [POP-1204] Pod ingress is not secured by a network policy
- [POP-1204] Pod egress is not secured by a network policy
- [POP-206] Pod has no associated PodDisruptionBudget
- [POP-301] Connects to API Server? ServiceAccount token is mounted
- [POP-302] Pod could be running as root user. Check SecurityContext/Image
- [POP-203] Pod is waiting [0/1] CrashLoopBackOff
- [POP-106] No resources requests/limits defined
- [POP-306] Container could be running as root user. Check SecurityContext/Image
PODDISRUPTIONBUDGETS (5 SCANNED)
0
0
0
5
100%
REPLICASETS (50 SCANNED)
2
0
0
48
96%
-
les-projets-cagnottes/les-projets-cagnottes-slack-events-catcher-5f966c49cc
- [POP-1120] Unhealthy ReplicaSet 1 desired but have 0 ready
-
velero/velero-ui-6ff554765b
- [POP-1120] Unhealthy ReplicaSet 1 desired but have 0 ready
ROLES (24 SCANNED)
0
0
0
24
100%
ROLEBINDINGS (26 SCANNED)
0
0
0
26
100%
SECRETS (145 SCANNED)
0
0
112
33
100%
-
botkube/iac-valeuriad-cert-star
- [POP-400] Used? Unable to locate resource reference
-
botkube/sh.helm.release.v1.botkube.v1
- [POP-400] Used? Unable to locate resource reference
-
botkube/sh.helm.release.v1.botkube.v2
- [POP-400] Used? Unable to locate resource reference
-
botkube/sh.helm.release.v1.botkube.v3
- [POP-400] Used? Unable to locate resource reference
-
cilium-secrets/iac-valeuriad-cert-star
- [POP-400] Used? Unable to locate resource reference
-
cooptation/access-token-github
- [POP-400] Used? Unable to locate resource reference
-
cooptation/cooptation-db-cluster-ca
- [POP-400] Used? Unable to locate resource reference
-
cooptation/cooptation-db-cluster-replication
- [POP-400] Used? Unable to locate resource reference
-
cooptation/cooptation-db-cluster-server
- [POP-400] Used? Unable to locate resource reference
-
cooptation/cooptation.local-tls
- [POP-400] Used? Unable to locate resource reference
-
cooptation/sh.helm.release.v1.cooptation.v1
- [POP-400] Used? Unable to locate resource reference
-
cooptation/sh.helm.release.v1.cooptation.v2
- [POP-400] Used? Unable to locate resource reference
-
cooptation/sh.helm.release.v1.cooptation.v3
- [POP-400] Used? Unable to locate resource reference
-
cooptation/sh.helm.release.v1.cooptation.v4
- [POP-400] Used? Unable to locate resource reference
-
cooptation/sh.helm.release.v1.cooptation.v5
- [POP-400] Used? Unable to locate resource reference
-
cooptation/sh.helm.release.v1.cooptation.v6
- [POP-400] Used? Unable to locate resource reference
-
cooptation/sh.helm.release.v1.cooptation.v7
- [POP-400] Used? Unable to locate resource reference
-
cooptation/sh.helm.release.v1.cooptation.v8
- [POP-400] Used? Unable to locate resource reference
-
default/iac-valeuriad-cert-star
- [POP-400] Used? Unable to locate resource reference
-
gitlab/gitlab-gitaly-secret
- [POP-400] Used? Unable to locate resource reference
-
gitlab/gitlab-gitlab-initial-root-password
- [POP-400] Used? Unable to locate resource reference
-
gitlab/gitlab-gitlab-kas-secret
- [POP-400] Used? Unable to locate resource reference
-
gitlab/gitlab-gitlab-runner-secret
- [POP-400] Used? Unable to locate resource reference
-
gitlab/gitlab-gitlab-shell-host-keys
- [POP-400] Used? Unable to locate resource reference
-
gitlab/gitlab-gitlab-shell-secret
- [POP-400] Used? Unable to locate resource reference
-
gitlab/gitlab-gitlab-suggested-reviewers
- [POP-400] Used? Unable to locate resource reference
-
gitlab/gitlab-gitlab-workhorse-secret
- [POP-400] Used? Unable to locate resource reference
-
gitlab/gitlab-kas-private-api
- [POP-400] Used? Unable to locate resource reference
-
gitlab/gitlab-kas-websocket-token
- [POP-400] Used? Unable to locate resource reference
-
gitlab/gitlab-minio-secret
- [POP-400] Used? Unable to locate resource reference
-
gitlab/gitlab-postgresql-password
- [POP-400] Used? Unable to locate resource reference
-
gitlab/gitlab-rails-secret
- [POP-400] Used? Unable to locate resource reference
-
gitlab/gitlab-redis-secret
- [POP-400] Used? Unable to locate resource reference
-
gitlab/gitlab-registry-database-password
- [POP-400] Used? Unable to locate resource reference
-
gitlab/gitlab-registry-httpsecret
- [POP-400] Used? Unable to locate resource reference
-
gitlab/gitlab-registry-notification
- [POP-400] Used? Unable to locate resource reference
-
gitlab/gitlab-registry-secret
- [POP-400] Used? Unable to locate resource reference
-
gitlab/iac-valeuriad-cert-star
- [POP-400] Used? Unable to locate resource reference
-
intranet/intranet-mysql-backup-gcs
- [POP-400] Used? Unable to locate resource reference
-
intranet/intranet-mysql-backup-mysql
- [POP-400] Used? Unable to locate resource reference
-
intranet/intranet.local-tls
- [POP-400] Used? Unable to locate resource reference
-
intranet/intranet.valeuriad.fr-tls
- [POP-400] Used? Unable to locate resource reference
-
intranet/sh.helm.release.v1.intranet.v1
- [POP-400] Used? Unable to locate resource reference
-
intranet/sh.helm.release.v1.intranet.v2
- [POP-400] Used? Unable to locate resource reference
-
intranet/sh.helm.release.v1.intranet.v3
- [POP-400] Used? Unable to locate resource reference
-
intranet/sh.helm.release.v1.intranet.v4
- [POP-400] Used? Unable to locate resource reference
-
intranet/sh.helm.release.v1.intranet.v5
- [POP-400] Used? Unable to locate resource reference
-
intranet/sh.helm.release.v1.intranet.v6
- [POP-400] Used? Unable to locate resource reference
-
kivaou/kivaou.local-tls
- [POP-400] Used? Unable to locate resource reference
-
kivaou/mongo
- [POP-400] Used? Unable to locate resource reference
-
kivaou/sh.helm.release.v1.kivaou.v10
- [POP-400] Used? Unable to locate resource reference
-
kivaou/sh.helm.release.v1.kivaou.v11
- [POP-400] Used? Unable to locate resource reference
-
kivaou/sh.helm.release.v1.kivaou.v12
- [POP-400] Used? Unable to locate resource reference
-
kivaou/sh.helm.release.v1.kivaou.v3
- [POP-400] Used? Unable to locate resource reference
-
kivaou/sh.helm.release.v1.kivaou.v4
- [POP-400] Used? Unable to locate resource reference
-
kivaou/sh.helm.release.v1.kivaou.v5
- [POP-400] Used? Unable to locate resource reference
-
kivaou/sh.helm.release.v1.kivaou.v6
- [POP-400] Used? Unable to locate resource reference
-
kivaou/sh.helm.release.v1.kivaou.v7
- [POP-400] Used? Unable to locate resource reference
-
kivaou/sh.helm.release.v1.kivaou.v8
- [POP-400] Used? Unable to locate resource reference
-
kivaou/sh.helm.release.v1.kivaou.v9
- [POP-400] Used? Unable to locate resource reference
-
kube-node-lease/iac-valeuriad-cert-star
- [POP-400] Used? Unable to locate resource reference
-
kube-public/iac-valeuriad-cert-star
- [POP-400] Used? Unable to locate resource reference
-
kube-system/cilium-ca
- [POP-400] Used? Unable to locate resource reference
-
kube-system/iac-valeuriad-cert-star
- [POP-400] Used? Unable to locate resource reference
-
les-projets-cagnottes/iac-valeuriad-cert-star
- [POP-400] Used? Unable to locate resource reference
-
les-projets-cagnottes/lesprojetscagnottes-db-cluster-ca
- [POP-400] Used? Unable to locate resource reference
-
les-projets-cagnottes/lesprojetscagnottes-db-cluster-replication
- [POP-400] Used? Unable to locate resource reference
-
les-projets-cagnottes/lesprojetscagnottes-db-cluster-server
- [POP-400] Used? Unable to locate resource reference
-
les-projets-cagnottes/sh.helm.release.v1.les-projets-cagnottes.v1
- [POP-400] Used? Unable to locate resource reference
-
materiel/materiel.local-tls
- [POP-400] Used? Unable to locate resource reference
-
materiel/sh.helm.release.v1.materiel.v1
- [POP-400] Used? Unable to locate resource reference
-
materiel/sh.helm.release.v1.materiel.v2
- [POP-400] Used? Unable to locate resource reference
-
materiel/sh.helm.release.v1.materiel.v3
- [POP-400] Used? Unable to locate resource reference
-
materiel/sh.helm.release.v1.materiel.v4
- [POP-400] Used? Unable to locate resource reference
-
materiel/sh.helm.release.v1.materiel.v5
- [POP-400] Used? Unable to locate resource reference
-
materiel/sh.helm.release.v1.materiel.v6
- [POP-400] Used? Unable to locate resource reference
-
materiel/sh.helm.release.v1.materiel.v7
- [POP-400] Used? Unable to locate resource reference
-
materiel/sh.helm.release.v1.materiel.v8
- [POP-400] Used? Unable to locate resource reference
-
monitoring/iac-valeuriad-cert-star
- [POP-400] Used? Unable to locate resource reference
-
monitoring/sh.helm.release.v1.alloy.v1
- [POP-400] Used? Unable to locate resource reference
-
monitoring/sh.helm.release.v1.alloy.v2
- [POP-400] Used? Unable to locate resource reference
-
monitoring/sh.helm.release.v1.oauth2-proxy.v1
- [POP-400] Used? Unable to locate resource reference
-
monitoring/sh.helm.release.v1.pushgateway.v1
- [POP-400] Used? Unable to locate resource reference
-
snipeit/iac-valeuriad-cert-star
- [POP-400] Used? Unable to locate resource reference
-
val-system/cert-manager-webhook-ca
- [POP-400] Used? Unable to locate resource reference
-
val-system/cnpg-ca-secret
- [POP-400] Used? Unable to locate resource reference
-
val-system/iac-valeuriad-cert-star
- [POP-400] Used? Unable to locate resource reference
-
val-system/letsencrypt
- [POP-400] Used? Unable to locate resource reference
-
val-system/scaleway-certmanager-webhook-ca
- [POP-400] Used? Unable to locate resource reference
-
val-system/scwsm-secret
- [POP-400] Used? Unable to locate resource reference
-
val-system/sh.helm.release.v1.cert-manager.v1
- [POP-400] Used? Unable to locate resource reference
-
val-system/sh.helm.release.v1.cnpg.v1
- [POP-400] Used? Unable to locate resource reference
-
val-system/sh.helm.release.v1.emberstack-reflector.v1
- [POP-400] Used? Unable to locate resource reference
-
val-system/sh.helm.release.v1.external-dns.v1
- [POP-400] Used? Unable to locate resource reference
-
val-system/sh.helm.release.v1.external-secrets.v1
- [POP-400] Used? Unable to locate resource reference
-
val-system/sh.helm.release.v1.nginx-ingress-controller.v1
- [POP-400] Used? Unable to locate resource reference
-
val-system/sh.helm.release.v1.scaleway-certmanager-webhook.v1
- [POP-400] Used? Unable to locate resource reference
-
val-system/sh.helm.release.v1.traefik.v1
- [POP-400] Used? Unable to locate resource reference
-
velero/iac-valeuriad-cert-star
- [POP-400] Used? Unable to locate resource reference
-
velero/sh.helm.release.v1.velero-ui.v1
- [POP-400] Used? Unable to locate resource reference
-
velero/sh.helm.release.v1.velero-ui.v2
- [POP-400] Used? Unable to locate resource reference
-
velero/sh.helm.release.v1.velero-ui.v3
- [POP-400] Used? Unable to locate resource reference
-
velero/sh.helm.release.v1.velero.v1
- [POP-400] Used? Unable to locate resource reference
-
velero/sh.helm.release.v1.velero.v2
- [POP-400] Used? Unable to locate resource reference
-
velero/sh.helm.release.v1.velero.v3
- [POP-400] Used? Unable to locate resource reference
-
velero/sh.helm.release.v1.velero.v4
- [POP-400] Used? Unable to locate resource reference
-
velero/sh.helm.release.v1.velero.v5
- [POP-400] Used? Unable to locate resource reference
-
velero/sh.helm.release.v1.velero.v6
- [POP-400] Used? Unable to locate resource reference
-
velero/sh.helm.release.v1.velero.v7
- [POP-400] Used? Unable to locate resource reference
-
velero/sh.helm.release.v1.velero.v8
- [POP-400] Used? Unable to locate resource reference
-
velero/velero-repo-credentials
- [POP-400] Used? Unable to locate resource reference
-
velero/velero-ui-passphrase
- [POP-400] Used? Unable to locate resource reference
SERVICES (39 SCANNED)
2
32
1
4
12%
-
botkube/botkube
- [POP-1101] Skip ports check. No explicit ports detected on pod botkube/botkube-9b8db96bc-fshjq
- [POP-1109] Single endpoint is associated with this service
-
cooptation/cooptation-api
- [POP-1109] Single endpoint is associated with this service
-
cooptation/cooptation-db-cluster-r
- [POP-1102] Use of target port #5432 for service port TCP:postgres:5432. Prefer named port
- [POP-1109] Single endpoint is associated with this service
-
cooptation/cooptation-db-cluster-ro
- [POP-1100] No pods match service selector
- [POP-1110] Match EP has no subsets
-
cooptation/cooptation-db-cluster-rw
- [POP-1102] Use of target port #5432 for service port TCP:postgres:5432. Prefer named port
- [POP-1109] Single endpoint is associated with this service
-
cooptation/cooptation-web
- [POP-1109] Single endpoint is associated with this service
-
intranet/intranet-mysql
- [POP-1109] Single endpoint is associated with this service
-
intranet/intranet-wordpress
- [POP-1109] Single endpoint is associated with this service
-
kivaou/kivaou-back
- [POP-1102] Use of target port #8080 for service port TCP:http:8080. Prefer named port
- [POP-1109] Single endpoint is associated with this service
-
kivaou/kivaou-front
- [POP-1109] Single endpoint is associated with this service
-
kivaou/kivaou-mongodb
- [POP-1109] Single endpoint is associated with this service
-
kube-system/coredns
- [POP-1102] Use of target port #53 for service port UDP:dns:53. Prefer named port
- [POP-1102] Use of target port #53 for service port TCP:dns-tcp:53. Prefer named port
- [POP-1102] Use of target port #9153 for service port TCP:metrics:9153. Prefer named port
- [POP-1109] Single endpoint is associated with this service
-
kube-system/metrics-server
- [POP-1109] Single endpoint is associated with this service
-
les-projets-cagnottes/les-projets-cagnottes-api
- [POP-1109] Single endpoint is associated with this service
-
les-projets-cagnottes/les-projets-cagnottes-web
- [POP-1109] Single endpoint is associated with this service
-
les-projets-cagnottes/lesprojetscagnottes-db-cluster-r
- [POP-1102] Use of target port #5432 for service port TCP:postgres:5432. Prefer named port
- [POP-1109] Single endpoint is associated with this service
-
les-projets-cagnottes/lesprojetscagnottes-db-cluster-ro
- [POP-1100] No pods match service selector
- [POP-1110] Match EP has no subsets
-
les-projets-cagnottes/lesprojetscagnottes-db-cluster-rw
- [POP-1102] Use of target port #5432 for service port TCP:postgres:5432. Prefer named port
- [POP-1109] Single endpoint is associated with this service
-
materiel/materiel-mysql
- [POP-1109] Single endpoint is associated with this service
-
materiel/materiel-snipeit
- [POP-1102] Use of target port #80 for service port TCP:http:80. Prefer named port
- [POP-1109] Single endpoint is associated with this service
-
monitoring/alloy
- [POP-1102] Use of target port #12345 for service port TCP:http-metrics:12345. Prefer named port
-
monitoring/oauth2-proxy
- [POP-1109] Single endpoint is associated with this service
-
monitoring/popeye-nginx
- [POP-1102] Use of target port #80 for service port TCP:http:80. Prefer named port
- [POP-1109] Single endpoint is associated with this service
-
monitoring/pushgateway-prometheus-pushgateway
- [POP-1102] Use of target port #9091 for service port TCP:http:9091. Prefer named port
- [POP-1109] Single endpoint is associated with this service
-
val-system/cert-manager
- [POP-1109] Single endpoint is associated with this service
-
val-system/cert-manager-cainjector
- [POP-1102] Use of target port #9402 for service port TCP:http-metrics:9402. Prefer named port
- [POP-1109] Single endpoint is associated with this service
-
val-system/cert-manager-webhook
- [POP-1109] Single endpoint is associated with this service
-
val-system/cnpg-webhook-service
- [POP-1109] Single endpoint is associated with this service
-
val-system/external-dns
- [POP-1109] Single endpoint is associated with this service
-
val-system/external-secrets-webhook
- [POP-1102] Use of target port #10250 for service port TCP:webhook:443. Prefer named port
- [POP-1109] Single endpoint is associated with this service
-
val-system/nginx-ingress-controller-ingress-nginx-controller
- [POP-1109] Single endpoint is associated with this service
- [POP-1103] Type LoadBalancer detected. Could be expensive
- [POP-1107] LoadBalancer detected but service sets externalTrafficPolicy to "Cluster"
-
val-system/nginx-ingress-controller-ingress-nginx-controller-admission
- [POP-1109] Single endpoint is associated with this service
-
val-system/scaleway-certmanager-webhook
- [POP-1109] Single endpoint is associated with this service
-
val-system/traefik
- [POP-1109] Single endpoint is associated with this service
- [POP-1103] Type LoadBalancer detected. Could be expensive
- [POP-1107] LoadBalancer detected but service sets externalTrafficPolicy to "Cluster"
-
velero/velero
- [POP-1109] Single endpoint is associated with this service
SERVICEACCOUNTS (82 SCANNED)
1
10
0
71
86%
-
kivaou/kivaou-mongodb
- [POP-304] References a secret "kivaou/kivaou-mongodb" which does not exist
-
monitoring/alloy
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
-
monitoring/oauth2-proxy
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
-
monitoring/popeye
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
-
monitoring/pushgateway-prometheus-pushgateway
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
-
val-system/cert-manager
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
-
val-system/cert-manager-cainjector
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
-
val-system/cert-manager-webhook
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
-
val-system/nginx-ingress-controller-ingress-nginx
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
-
velero/velero-server
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
-
velero/velero-ui
- [POP-303] Do you mean it? ServiceAccount is automounting APIServer credentials
STATEFULSETS (0 SCANNED)
0
0
0
0
100%