🎯 KubePattern in Action

KubePattern is not just a validator, it's an useful tool for automating the hygiene and security of your Kubernetes cluster. Select a use case below to see its details.

Detect Orphan Resources

Cluesters tent to accumulate "garbage" over time. KubePattern helps you identify resources that exist but are no longer referenced or used by any active workload.

• ConfigMap e Secret not mouted by any Pod.
• Krateo Widgets not used
• ...

💡 Advantages

Reduce cloud costs and keep your etcd database clean.

Detect Absence

Sometimes the issue is not what exists, but what's missing. Ensure security and governance best practices are always applied by checking for the presence of mandatory resources.

• Verify that each Namespace has a default NetworkPolicy (e.g., deny-all).
• Ensure LimitRange and ResourceQuotas exist.
• Check that workloads have the necessary PodDisruptionBudget.

Delete Zombies

KubePattern can not only detect zombies, orphans or misconfigurations, but also actively clean them up.

⚠️ Warning

Be careful when deleting resources. Always test the impact of deletion before removing resources.

Detect Misconfigurations

Prevent security incidents and instability by scanning Kubernetes manifests for misconfigurations.

• Container configured to run as root or with privileged: true.
• Lack of requests and limits for CPU and Memory.
• Image tags set to :latest instead of specific versions.

💡 Info

KubePattern is not intended to be a replacement for tools such as Kyverno or OPA. But is a convenient way to spot also misconfigurations.