Karpenter is a Kubernetes Node Autoscaler built for flexibility, performance, and simplicity.
This report summarizes scanner evidence for aws/karpenter-provider-aws, a Go project with 7,730 GitHub stars. SynthScan examined 258,140 lines of code across 1008 source files, recording 154 pattern matches distributed across 8 syntactic categories. The legacy adjusted pattern signal is 1.5 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 106 finding(s).
Are imports declared and package/API names verified? 0 finding(s).
Are wrappers, guards, and repeated structures necessary? 50 finding(s).
Which changes need focused human review? 154 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 154 distinct pattern matches across 8 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM⚡ | website/content/en/v1.0/concepts/disruption.md | 296 | # ┌───────────── minute (0 - 59) | COMMENT |
| MEDIUM⚡ | website/content/en/v1.0/concepts/disruption.md | 297 | # │ ┌───────────── hour (0 - 23) | COMMENT |
| MEDIUM⚡ | website/content/en/v1.0/concepts/disruption.md | 298 | # │ │ ┌───────────── day of the month (1 - 31) | COMMENT |
| MEDIUM⚡ | website/content/en/v1.0/concepts/disruption.md | 299 | # │ │ │ ┌───────────── month (1 - 12) | COMMENT |
| MEDIUM⚡ | website/content/en/v1.0/concepts/disruption.md | 300 | # │ │ │ │ ┌───────────── day of the week (0 - 6) (Sunday to Saturday; | COMMENT |
| MEDIUM⚡ | website/content/en/docs/concepts/disruption.md | 469 | # ┌───────────── minute (0 - 59) | COMMENT |
| MEDIUM⚡ | website/content/en/docs/concepts/disruption.md | 470 | # │ ┌───────────── hour (0 - 23) | COMMENT |
| MEDIUM⚡ | website/content/en/docs/concepts/disruption.md | 471 | # │ │ ┌───────────── day of the month (1 - 31) | COMMENT |
| MEDIUM⚡ | website/content/en/docs/concepts/disruption.md | 472 | # │ │ │ ┌───────────── month (1 - 12) | COMMENT |
| MEDIUM⚡ | website/content/en/docs/concepts/disruption.md | 473 | # │ │ │ │ ┌───────────── day of the week (0 - 6) (Sunday to Saturday; | COMMENT |
| MEDIUM⚡ | website/content/en/preview/concepts/disruption.md | 495 | # ┌───────────── minute (0 - 59) | COMMENT |
| MEDIUM⚡ | website/content/en/preview/concepts/disruption.md | 496 | # │ ┌───────────── hour (0 - 23) | COMMENT |
| MEDIUM⚡ | website/content/en/preview/concepts/disruption.md | 497 | # │ │ ┌───────────── day of the month (1 - 31) | COMMENT |
| MEDIUM⚡ | website/content/en/preview/concepts/disruption.md | 498 | # │ │ │ ┌───────────── month (1 - 12) | COMMENT |
| MEDIUM⚡ | website/content/en/preview/concepts/disruption.md | 499 | # │ │ │ │ ┌───────────── day of the week (0 - 6) (Sunday to Saturday; | COMMENT |
| MEDIUM⚡ | website/content/en/v1.15/concepts/disruption.md | 469 | # ┌───────────── minute (0 - 59) | COMMENT |
| MEDIUM⚡ | website/content/en/v1.15/concepts/disruption.md | 470 | # │ ┌───────────── hour (0 - 23) | COMMENT |
| MEDIUM⚡ | website/content/en/v1.15/concepts/disruption.md | 471 | # │ │ ┌───────────── day of the month (1 - 31) | COMMENT |
| MEDIUM⚡ | website/content/en/v1.15/concepts/disruption.md | 472 | # │ │ │ ┌───────────── month (1 - 12) | COMMENT |
| MEDIUM⚡ | website/content/en/v1.15/concepts/disruption.md | 473 | # │ │ │ │ ┌───────────── day of the week (0 - 6) (Sunday to Saturday; | COMMENT |
| MEDIUM⚡ | website/content/en/v1.14/concepts/disruption.md | 358 | # ┌───────────── minute (0 - 59) | COMMENT |
| MEDIUM⚡ | website/content/en/v1.14/concepts/disruption.md | 359 | # │ ┌───────────── hour (0 - 23) | COMMENT |
| MEDIUM⚡ | website/content/en/v1.14/concepts/disruption.md | 360 | # │ │ ┌───────────── day of the month (1 - 31) | COMMENT |
| MEDIUM⚡ | website/content/en/v1.14/concepts/disruption.md | 361 | # │ │ │ ┌───────────── month (1 - 12) | COMMENT |
| MEDIUM⚡ | website/content/en/v1.14/concepts/disruption.md | 362 | # │ │ │ │ ┌───────────── day of the week (0 - 6) (Sunday to Saturday; | COMMENT |
| MEDIUM⚡ | website/content/en/v1.13/concepts/disruption.md | 336 | # ┌───────────── minute (0 - 59) | COMMENT |
| MEDIUM⚡ | website/content/en/v1.13/concepts/disruption.md | 337 | # │ ┌───────────── hour (0 - 23) | COMMENT |
| MEDIUM⚡ | website/content/en/v1.13/concepts/disruption.md | 338 | # │ │ ┌───────────── day of the month (1 - 31) | COMMENT |
| MEDIUM⚡ | website/content/en/v1.13/concepts/disruption.md | 339 | # │ │ │ ┌───────────── month (1 - 12) | COMMENT |
| MEDIUM⚡ | website/content/en/v1.13/concepts/disruption.md | 340 | # │ │ │ │ ┌───────────── day of the week (0 - 6) (Sunday to Saturday; | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | …s/karpenter/crds/karpenter.k8s.aws_ec2nodeclasses.yaml | 0 | alias'' is improperly formatted, must match the format ''family@version | STRING |
| HIGH | …er-crd/templates/karpenter.k8s.aws_ec2nodeclasses.yaml | 0 | alias'' is improperly formatted, must match the format ''family@version | STRING |
| HIGH | pkg/apis/crds/karpenter.k8s.aws_ec2nodeclasses.yaml | 0 | alias'' is improperly formatted, must match the format ''family@version | STRING |
| HIGH | …s/karpenter/crds/karpenter.k8s.aws_ec2nodeclasses.yaml | 0 | rule: self.split('@')[0] in ['al2','al2023','bottlerocket','windows2019','windows2022','windows2025'] - message: windows | STRING |
| HIGH | …er-crd/templates/karpenter.k8s.aws_ec2nodeclasses.yaml | 0 | rule: self.split('@')[0] in ['al2','al2023','bottlerocket','windows2019','windows2022','windows2025'] - message: windows | STRING |
| HIGH | pkg/apis/crds/karpenter.k8s.aws_ec2nodeclasses.yaml | 0 | rule: self.split('@')[0] in ['al2','al2023','bottlerocket','windows2019','windows2022','windows2025'] - message: windows | STRING |
| HIGH | …s/karpenter/crds/karpenter.k8s.aws_ec2nodeclasses.yaml | 0 | alias'' is mutually exclusive, cannot be set with a combination of other fields in amiselectorterms' rule: '!self.exists | STRING |
| HIGH | …er-crd/templates/karpenter.k8s.aws_ec2nodeclasses.yaml | 0 | alias'' is mutually exclusive, cannot be set with a combination of other fields in amiselectorterms' rule: '!self.exists | STRING |
| HIGH | pkg/apis/crds/karpenter.k8s.aws_ec2nodeclasses.yaml | 0 | alias'' is mutually exclusive, cannot be set with a combination of other fields in amiselectorterms' rule: '!self.exists | STRING |
| HIGH | …s/karpenter/crds/karpenter.k8s.aws_ec2nodeclasses.yaml | 0 | ')' rootvolume: description: |- rootvolume is a flag indicating if this device is mounted as kubelet root dir. you can c | STRING |
| HIGH | …er-crd/templates/karpenter.k8s.aws_ec2nodeclasses.yaml | 0 | ')' rootvolume: description: |- rootvolume is a flag indicating if this device is mounted as kubelet root dir. you can c | STRING |
| HIGH | pkg/apis/crds/karpenter.k8s.aws_ec2nodeclasses.yaml | 0 | ')' rootvolume: description: |- rootvolume is a flag indicating if this device is mounted as kubelet root dir. you can c | STRING |
| HIGH | …s/karpenter/crds/karpenter.k8s.aws_ec2nodeclasses.yaml | 0 | name'' and ''id'' are mutually exclusive' rule: '!(has(self.name) && has(self.id))' role: description: |- role is the aw | STRING |
| HIGH | …er-crd/templates/karpenter.k8s.aws_ec2nodeclasses.yaml | 0 | name'' and ''id'' are mutually exclusive' rule: '!(has(self.name) && has(self.id))' role: description: |- role is the aw | STRING |
| HIGH | pkg/apis/crds/karpenter.k8s.aws_ec2nodeclasses.yaml | 0 | name'' and ''id'' are mutually exclusive' rule: '!(has(self.name) && has(self.id))' role: description: |- role is the aw | STRING |
| HIGH | …s/karpenter/crds/karpenter.k8s.aws_ec2nodeclasses.yaml | 0 | name'' is mutually exclusive, cannot be set with a combination of other fields in a security group selector term' rule: | STRING |
| HIGH | …er-crd/templates/karpenter.k8s.aws_ec2nodeclasses.yaml | 0 | name'' is mutually exclusive, cannot be set with a combination of other fields in a security group selector term' rule: | STRING |
| HIGH | pkg/apis/crds/karpenter.k8s.aws_ec2nodeclasses.yaml | 0 | name'' is mutually exclusive, cannot be set with a combination of other fields in a security group selector term' rule: | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | designs/node-upgrades.md | 113 | If consolidation and upgrades are executed concurrently, pods that are rescheduling due to consolidation could schedule | CODE |
| MEDIUM | designs/v1-api.md | 197 | The HTTPPutResponseHopLimit is [part of the instance metadata settings that are configured on the node on startup](https | CODE |
| MEDIUM | website/content/en/v1.0/upgrading/upgrade-guide.md | 237 | * Since Karpenter uses tags for discovery of Subnets and SecurityGroups, check the [Threat Model]({{<ref "../reference | COMMENT |
| MEDIUM | website/content/en/v1.0/upgrading/upgrade-guide.md | 246 | * The `aws.nodeNameConvention` setting is now removed from the [`karpenter-global-settings`]({{<ref "../reference/settin | COMMENT |
| MEDIUM | website/content/en/v1.0/upgrading/upgrade-guide.md | 269 | Because Karpenter takes this dependency, any user that has the ability to Create/Delete these tags on CloudProvider mach | CODE |
| MEDIUM | website/content/en/v1.0/reference/threat-model.md | 89 | ### Threat: Karpenter can orchestrate the creation/deletion of IAM Instance Profiles it doesn't own | COMMENT |
| MEDIUM | website/content/en/docs/upgrading/upgrade-guide.md | 479 | * Since Karpenter uses tags for discovery of Subnets and SecurityGroups, check the [Threat Model]({{<ref "../reference | COMMENT |
| MEDIUM | website/content/en/docs/upgrading/upgrade-guide.md | 488 | * The `aws.nodeNameConvention` setting is now removed from the [`karpenter-global-settings`]({{<ref "../reference/settin | COMMENT |
| MEDIUM | website/content/en/docs/upgrading/upgrade-guide.md | 511 | Because Karpenter takes this dependency, any user that has the ability to Create/Delete these tags on CloudProvider mach | CODE |
| MEDIUM | website/content/en/docs/reference/threat-model.md | 89 | ### Threat: Karpenter can orchestrate the creation/deletion of IAM Instance Profiles it doesn't own | COMMENT |
| MEDIUM | website/content/en/preview/upgrading/upgrade-guide.md | 507 | * Since Karpenter uses tags for discovery of Subnets and SecurityGroups, check the [Threat Model]({{<ref "../reference | COMMENT |
| MEDIUM | website/content/en/preview/upgrading/upgrade-guide.md | 516 | * The `aws.nodeNameConvention` setting is now removed from the [`karpenter-global-settings`]({{<ref "../reference/settin | COMMENT |
| MEDIUM | website/content/en/preview/upgrading/upgrade-guide.md | 539 | Because Karpenter takes this dependency, any user that has the ability to Create/Delete these tags on CloudProvider mach | CODE |
| MEDIUM | website/content/en/preview/reference/threat-model.md | 93 | ### Threat: Karpenter can orchestrate the creation/deletion of IAM Instance Profiles it doesn't own | COMMENT |
| MEDIUM | website/content/en/v1.15/upgrading/upgrade-guide.md | 479 | * Since Karpenter uses tags for discovery of Subnets and SecurityGroups, check the [Threat Model]({{<ref "../reference | COMMENT |
| MEDIUM | website/content/en/v1.15/upgrading/upgrade-guide.md | 488 | * The `aws.nodeNameConvention` setting is now removed from the [`karpenter-global-settings`]({{<ref "../reference/settin | COMMENT |
| MEDIUM | website/content/en/v1.15/upgrading/upgrade-guide.md | 511 | Because Karpenter takes this dependency, any user that has the ability to Create/Delete these tags on CloudProvider mach | CODE |
| MEDIUM | website/content/en/v1.15/reference/threat-model.md | 89 | ### Threat: Karpenter can orchestrate the creation/deletion of IAM Instance Profiles it doesn't own | COMMENT |
| MEDIUM | website/content/en/v1.14/upgrading/upgrade-guide.md | 453 | * Since Karpenter uses tags for discovery of Subnets and SecurityGroups, check the [Threat Model]({{<ref "../reference | COMMENT |
| MEDIUM | website/content/en/v1.14/upgrading/upgrade-guide.md | 462 | * The `aws.nodeNameConvention` setting is now removed from the [`karpenter-global-settings`]({{<ref "../reference/settin | COMMENT |
| MEDIUM | website/content/en/v1.14/upgrading/upgrade-guide.md | 485 | Because Karpenter takes this dependency, any user that has the ability to Create/Delete these tags on CloudProvider mach | CODE |
| MEDIUM | website/content/en/v1.14/reference/threat-model.md | 89 | ### Threat: Karpenter can orchestrate the creation/deletion of IAM Instance Profiles it doesn't own | COMMENT |
| MEDIUM | website/content/en/v1.13/upgrading/upgrade-guide.md | 435 | * Since Karpenter uses tags for discovery of Subnets and SecurityGroups, check the [Threat Model]({{<ref "../reference | COMMENT |
| MEDIUM | website/content/en/v1.13/upgrading/upgrade-guide.md | 444 | * The `aws.nodeNameConvention` setting is now removed from the [`karpenter-global-settings`]({{<ref "../reference/settin | COMMENT |
| MEDIUM | website/content/en/v1.13/upgrading/upgrade-guide.md | 467 | Because Karpenter takes this dependency, any user that has the ability to Create/Delete these tags on CloudProvider mach | CODE |
| MEDIUM | website/content/en/v1.13/reference/threat-model.md | 89 | ### Threat: Karpenter can orchestrate the creation/deletion of IAM Instance Profiles it doesn't own | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | kwok/main.go | 1 | // Licensed under the Apache License, Version 2.0 (the "License"); | COMMENT |
| LOW | kwok/cloudprovider/cloudprovider.go | 1 | // Licensed under the Apache License, Version 2.0 (the "License"); | COMMENT |
| LOW | kwok/strategy/strategy.go | 1 | // Licensed under the Apache License, Version 2.0 (the "License"); | COMMENT |
| LOW | kwok/ec2/ratelimiting.go | 1 | // Licensed under the Apache License, Version 2.0 (the "License"); | COMMENT |
| LOW | kwok/ec2/ec2.go | 1 | // Licensed under the Apache License, Version 2.0 (the "License"); | COMMENT |
| LOW | designs/odcr.md | 101 | # If no ownerID is specified, any ODCRs available to the current account will be used | COMMENT |
| LOW | designs/odcr.md | 121 | # Zone). Instances that have matching attributes launch into the | COMMENT |
| LOW | website/content/en/v1.0/concepts/nodeclasses.md | 61 | amiFamily: AL2 | COMMENT |
| LOW | website/content/en/v1.0/concepts/nodepools.md | 121 | # Configuration in this section constrains how aggressive Karpenter can be with performing operations | COMMENT |
| LOW | website/content/en/docs/concepts/disruption.md | 461 | - "Underutilized" | COMMENT |
| LOW | website/content/en/docs/concepts/nodeclasses.md | 61 | amiFamily: AL2 | COMMENT |
| LOW | website/content/en/docs/concepts/nodepools.md | 121 | # Configuration in this section constrains how aggressive Karpenter can be with performing operations | COMMENT |
| LOW | website/content/en/preview/concepts/nodeclasses.md | 61 | amiFamily: AL2 | COMMENT |
| LOW | website/content/en/preview/concepts/nodepools.md | 121 | # Configuration in this section constrains how aggressive Karpenter can be with performing operations | COMMENT |
| LOW | website/content/en/v1.15/concepts/disruption.md | 461 | - "Underutilized" | COMMENT |
| LOW | website/content/en/v1.15/concepts/nodeclasses.md | 61 | amiFamily: AL2 | COMMENT |
| LOW | website/content/en/v1.15/concepts/nodepools.md | 121 | # Configuration in this section constrains how aggressive Karpenter can be with performing operations | COMMENT |
| LOW | website/content/en/v1.14/concepts/nodeclasses.md | 61 | amiFamily: AL2 | COMMENT |
| LOW | website/content/en/v1.14/concepts/nodepools.md | 121 | # Configuration in this section constrains how aggressive Karpenter can be with performing operations | COMMENT |
| LOW | website/content/en/v1.13/concepts/nodeclasses.md | 61 | amiFamily: AL2 | COMMENT |
| LOW | website/content/en/v1.13/concepts/nodepools.md | 121 | # Configuration in this section constrains how aggressive Karpenter can be with performing operations | COMMENT |
| LOW | charts/karpenter/values.yaml | 21 | # -- The name of the ServiceAccount to use. | COMMENT |
| LOW | charts/karpenter/values.yaml | 141 | seLinuxOptions: {} | COMMENT |
| LOW | charts/karpenter/values.yaml | 181 | # -- The maximum length of a batch window. The longer this is, the more pods we can consider for provisioning at one | COMMENT |
| LOW | charts/karpenter/values.yaml | 201 | isolatedVPC: false | COMMENT |
| LOW | charts/karpenter/values.yaml | 221 | # (awsFeatureGates.draNVIDIAGPU or awsFeatureGates.draEFA) overrides this to false. Can't be combined with enableDRA. | COMMENT |
| LOW | charts/karpenter/values.yaml | 241 | # -- Feature Gate configuration values. Feature Gates will follow the same graduation process and requirements as feat | COMMENT |
| LOW | charts/karpenter/values.yaml | 261 | capacityBuffer: false | COMMENT |
| LOW | charts/karpenter/values.yaml | 281 | # Setting this to true will make Karpenter calculate the DRA devices the NVIDIA GPU driver publishes, | COMMENT |
| LOW | hack/docs/metrics_gen/main.go | 41 | namespace string | COMMENT |
| LOW | hack/docs/metrics_gen/main.go | 101 | // Maps a []string const/var name to its values (e.g. aws-sdk-go-prometheus labels). | COMMENT |
| LOW | hack/docs/metrics_gen/main.go | 121 | labelVarInfo = map[string]labelInfo{} | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass.go | 41 | SubnetSelectorTerms []SubnetSelectorTerm `json:"subnetSelectorTerms" hash:"ignore"` | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass.go | 61 | PlacementGroupSelector *PlacementGroupSelector `json:"placementGroupSelector,omitempty"` | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass.go | 81 | // alias is specified, this field is required. | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass.go | 101 | // +kubebuilder:validation:XValidation:rule="self != ''",message="instanceProfile cannot be empty" | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass.go | 121 | // +kubebuilder:validation:Type=object | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass.go | 141 | // MetadataOptions for the generated launch template of provisioned nodes. | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass.go | 161 | // When enclaveOptions is specified, enabled is required. | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass.go | 181 | // If multiple fields are used for selection, the requirements are ANDed. | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass.go | 201 | // +kubebuilder:validation:MaxProperties:=20 | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass.go | 221 | // +kubebuilder:validation:Pattern:="^cr-[0-9a-z]+$" | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass.go | 241 | // +optional | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass.go | 261 | // Specifying '*' for a value selects all values for a given tag key. | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass.go | 281 | } | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass.go | 301 | // +kubebuilder:validation:Enum:={enabled,disabled} | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass.go | 321 | // HTTPTokens determines the state of token usage for instance metadata | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass.go | 341 | // CPUOptions contains parameters for specifying the CPU configuration for provisioned EC2 nodes. | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass.go | 361 | type ConnectionTracking struct { | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass.go | 381 | // traffic only in a single direction or a single request-response transaction. | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass.go | 401 | // +optional | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass.go | 421 | // * gp3: 3,000-16,000 IOPS | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass.go | 441 | // Throughput to provision for a gp3 volume, with a maximum of 1,000 MiB/s. | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass.go | 461 | // | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass.go | 521 | COMMENT | |
| LOW | pkg/apis/v1/ec2nodeclass_status.go | 61 | ID string `json:"id"` | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass_status.go | 81 | } | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass_status.go | 101 | InstanceType string `json:"instanceType"` | COMMENT |
| LOW | pkg/apis/v1/ec2nodeclass_status.go | 141 | ) | COMMENT |
| LOW | pkg/cache/cache.go | 21 | COMMENT | |
| 10 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | pkg/providers/securitygroup/securitygroup.go | 51 | // TODO: Remove cache cache when we utilize the security groups from the EC2NodeClass.status | COMMENT |
| MEDIUM | …rs/instancetype/offering/reserved_capacity_resolver.go | 80 | // users to utilize the instances they're already paying for. | COMMENT |
| MEDIUM | pkg/providers/subnet/subnet.go | 72 | // TODO: Remove cache when we utilize the resolved subnets from the EC2NodeClass.status | COMMENT |
| MEDIUM | …/controllers/interruption/instancestatus_controller.go | 116 | // difficult to utilize. We take the stance that if there is a scheduled maintenance event, | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | test/suites/integration/testdata/amd_driver_input.sh | 12 | # Create a script to install the AMD Radeon GPU | COMMENT |
| MEDIUM | test/suites/integration/testdata/amd_driver_input.sh | 25 | # Create a service that will run on system reboot | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …/suites/scheduling/testdata/hugepage_userdata_input.sh | 8 | # Check if HugePages is activated | COMMENT |
| LOW | …ites/consolidation/testdata/hugepage_userdata_input.sh | 8 | # Check if HugePages is activated | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | hack/validation/requirements.sh | 3 | function injectDomainRequirementRestrictions() { | CODE |
| LOW | hack/validation/labels.sh | 3 | function injectDomainLabelRestrictions() { | CODE |