KubePattern in Action

KubePattern is for the questions a per-resource check cannot answer: is this still used, does it point at something that exists, is the thing that should be next to it actually there? Pick a use case to see what it looks like.

Find definitions nobody uses

Clusters collect definitions that were once needed: stores, issuers, catalogue entries, templates. They keep credentials, controllers and polling loops alive for nothing, and the platform itself rarely says so.

• cert-managera ClusterIssuer that no Certificate uses, still holding signing material
• External Secretsa SecretStore that no ExternalSecret reads, still holding provider credentials
• Crossplanea Function that no Composition pipeline step uses, yet still runs a Pod
• Kargoa Warehouse that no Stage requests, yet keeps discovering artifacts

Why it matters

Less attack surface, less cost, and a smaller cluster to reason about. In KubePattern’s evaluation, none of the nine platforms flagged an unused definition by itself.

See it on real platforms

The Pattern reference shows how each family of smell is written, with examples for real platforms. The Registry has ready-made patterns for GitOps tools, operators, control planes and platform portals.