Kubernetes Operations (kOps) - Production Grade k8s Installation, Upgrades and Management
This report summarizes scanner evidence for kubernetes/kops, a Go project with 16,696 GitHub stars. SynthScan examined 528,492 lines of code across 2615 source files, recording 585 pattern matches distributed across 13 syntactic categories. The legacy adjusted pattern signal is 1.4 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 457 finding(s).
Are imports declared and package/API names verified? 126 finding(s).
Are wrappers, guards, and repeated structures necessary? 2 finding(s).
Which changes need focused human review? 585 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 585 distinct pattern matches across 13 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | cmd/kops/get_cluster.go | 61 | // Warning for --full. Since we are not using the template from kubectl | COMMENT |
| LOW | cmd/kops/reconcile_cluster.go | 81 | COMMENT | |
| LOW | cmd/kops/reconcile_cluster.go | 101 | // return sets.NewString(allRoles...).Delete(options.InstanceGroupRoles...).List(), cobra.ShellCompDirectiveNoFileComp | COMMENT |
| LOW | tools/get_version.sh | 1 | #!/bin/bash | COMMENT |
| LOW | tools/xz.sh | 1 | #!/bin/bash | COMMENT |
| LOW | …ls/otel/traceserver/pb/jaeger/storage/v1/storage.pb.go | 21 | // You may obtain a copy of the License at | COMMENT |
| LOW | tools/otel/traceserver/pb/jaeger/api/v2/model.pb.go | 21 | // You may obtain a copy of the License at | COMMENT |
| LOW | util/pkg/vfs/s3fs.go | 621 | // allowsAnonymousRead := false | COMMENT |
| LOW | images/mkdocs/entrypoint.sh | 1 | #!/bin/bash | COMMENT |
| LOW | dns-controller/pkg/dns/zonespec_test.go | 141 | // { | COMMENT |
| LOW | dnsprovider/pkg/dnsprovider/dns.go | 61 | Get(name string) ([]ResourceRecordSet, error) | COMMENT |
| LOW | …ders/google/clouddns/internal/interfaces/interfaces.go | 61 | // PageToken(pageToken string) *ChangesListCall // TODO: Add as needed | COMMENT |
| LOW | clusterapi/snapshot/update-snapshot.sh | 1 | #!/bin/bash | COMMENT |
| LOW | …erapi/snapshot/cluster-api/api/v1beta1/common_types.go | 41 | // for this MachineDeployment topology and all subsequent ones is deferred. | COMMENT |
| LOW | …erapi/snapshot/cluster-api/api/v1beta1/common_types.go | 101 | // Controllers working with Cluster API objects must check the existence of this annotation | COMMENT |
| LOW | …erapi/snapshot/cluster-api/api/v1beta1/common_types.go | 121 | // that was cloned for the machine. This annotation is set only during cloning a template. Older/adopted machines will | COMMENT |
| LOW | …erapi/snapshot/cluster-api/api/v1beta1/common_types.go | 141 | MachineSetSkipPreflightChecksAnnotation = "machineset.cluster.x-k8s.io/skip-preflight-checks" | COMMENT |
| LOW | …erapi/snapshot/cluster-api/api/v1beta1/common_types.go | 161 | // update webhooks for objects which get updated by template rotation (e.g. InfrastructureMachineTemplate). | COMMENT |
| LOW | …erapi/snapshot/cluster-api/api/v1beta1/common_types.go | 181 | // Note: It can be used by setting as top level annotation on MachineDeployment and MachineSets. | COMMENT |
| LOW | …erapi/snapshot/cluster-api/api/v1beta1/common_types.go | 201 | COMMENT | |
| LOW | …erapi/snapshot/cluster-api/api/v1beta1/common_types.go | 281 | // the API and some issues that can impact user experience. | COMMENT |
| LOW | …pi/snapshot/cluster-api/api/v1beta1/condition_types.go | 61 | // Status of the condition, one of True, False, Unknown. | COMMENT |
| LOW | …sterapi/bootstrap/kops/api/v1beta1/kopsconfig_types.go | 41 | COMMENT | |
| LOW | …ane/kops/api/v1beta1/kopscontrolplanetemplate_types.go | 61 | // More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata | COMMENT |
| LOW | …ontrolplane/kops/api/v1beta1/kopscontrolplane_types.go | 41 | // KopsControlPlaneStatus defines the observed state of KopsControlPlane. | COMMENT |
| LOW | …ontrolplane/kops/api/v1beta1/kopscontrolplane_types.go | 101 | // +kubebuilder:printcolumn:name="Cluster",type="string",JSONPath=".metadata.labels['cluster\\.x-k8s\\.io/cluster-name'] | COMMENT |
| LOW | clusterapi/pkg/builders/utils.go | 41 | // UID: owner.GetUID(), | COMMENT |
| LOW | discovery/scripts/create-kubeconfig.sh | 1 | #!/bin/bash | COMMENT |
| LOW | tests/fuzz/build.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/kubetest2-kops/deployer/common.go | 161 | "aws": {"AWS_SSH_PRIVATE_KEY_FILE", "AWS_SSH_PUBLIC_KEY_FILE"}, | COMMENT |
| LOW | …sts/e2e/scenarios/cilium-connectivity-test/run-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/scenarios/cilium-connectivity-test/test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/scenarios/splitkcp/run-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/scenarios/upgrade-ab/run-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/scenarios/agent-sandbox/run-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/scenarios/agent-sandbox/run-test.sh | 101 | # kubetest2-kops would otherwise shrink the root volumes to 48GB (100GB for GCE | COMMENT |
| LOW | tests/e2e/scenarios/agent-sandbox/run-test.sh | 121 | OVERRIDES="${OVERRIDES} --set=cluster.spec.kubeScheduler.qps=500" | COMMENT |
| LOW | tests/e2e/scenarios/karpenter/run-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/scenarios/karpenter/test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/scenarios/aws-boskos/run-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/scenarios/metrics-server/run-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/scenarios/metrics-server/test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/scenarios/aws-lb-controller/run-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/scenarios/aws-lb-controller/test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/scenarios/ai-conformance/run-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | …stration/clusterautoscaling/clusterautoscaling_test.go | 21 | "strings" | COMMENT |
| LOW | …operator/robust_controller/testdata/rayjob-sample.yaml | 1 | # Based on https://raw.githubusercontent.com/ray-project/kuberay/v1.5.1/ray-operator/config/samples/ray-job.sample.yaml | COMMENT |
| LOW | …operator/robust_controller/testdata/rayjob-sample.yaml | 101 | COMMENT | |
| LOW | tests/e2e/scenarios/addon-resource-tracking/run-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/scenarios/addon-resource-tracking/test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/scenarios/clusterapi/run-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/scenarios/podidentitywebhook/run-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/scenarios/podidentitywebhook/test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/scenarios/scalability/run-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/scenarios/scalability/post-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/scenarios/scalability/pre-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/scenarios/keypair-rotation/run-test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/scenarios/keypair-rotation/test.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/scenarios/lib/common.sh | 1 | #!/usr/bin/env bash | COMMENT |
| LOW | tests/e2e/scenarios/lib/upgrade.sh | 1 | #!/usr/bin/env bash | COMMENT |
| 322 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | cmd/kops/create.go | 55 | # Create a cluster from the configuration specification in a YAML file. | COMMENT |
| MEDIUM | cmd/kops/create.go | 58 | # Create an instancegroup based on the YAML passed into stdin. | COMMENT |
| MEDIUM | cmd/kops/toolbox_instance-selector.go | 100 | ## Create a spot instance group using a MixInstancesPolicy and Capacity-Optimized spot allocation strategy. | COMMENT |
| MEDIUM | cmd/kops/toolbox_instance-selector.go | 104 | ## Create an on-demand instance group with custom vcpu and memory range filters. | COMMENT |
| MEDIUM | cmd/kops/create_instancegroup.go | 71 | # Create an instancegroup for the k8s-cluster.example.com cluster. | COMMENT |
| MEDIUM | cmd/kops/create_instancegroup.go | 75 | # Create a YAML manifest for an instancegroup for the k8s-cluster.example.com cluster. | COMMENT |
| MEDIUM | cmd/kops/create_secret_ciliumpassword.go | 40 | # Create a new Cilium IPsec configuration. | COMMENT |
| MEDIUM | cmd/kops/create_secret_ciliumpassword.go | 44 | # Create a new Cilium IPsec key via stdin. | COMMENT |
| MEDIUM | cmd/kops/create_cluster.go | 126 | # Create a cluster in AWS in a single zone. | COMMENT |
| MEDIUM | cmd/kops/create_cluster.go | 132 | # Create a cluster in AWS with a High Availability control plane. This cluster | COMMENT |
| MEDIUM | cmd/kops/create_cluster.go | 150 | # Create a cluster in Digital Ocean. | COMMENT |
| MEDIUM | cmd/kops/create_cluster.go | 160 | # Create a cluster in GCE with a dedicated APIServer-Only front-end. | COMMENT |
| MEDIUM | cmd/kops/create_secret_dockerconfig.go | 46 | # Create a new Docker config. | COMMENT |
| MEDIUM | cmd/kops/create_secret_dockerconfig.go | 50 | # Create a docker config via stdin. | COMMENT |
| MEDIUM | cmd/kops/create_sshpublickey.go | 38 | # Create a new SSH public key from the file ""~/.ssh/id_rsa.pub". | COMMENT |
| MEDIUM | cmd/kops/create_secret_encryptionconfig.go | 40 | # Create a new encryption config. | COMMENT |
| MEDIUM | cmd/kops/create_secret_encryptionconfig.go | 44 | # Create a new encryption config via stdin. | COMMENT |
| MEDIUM | tests/e2e/scenarios/ai-conformance/run-test.sh | 280 | # Create a ResourceClaim and Pod to test DRA | COMMENT |
| MEDIUM | …/accelerators/dra_support/testdata/cuda-smoketest.yaml | 1 | # Create a ResourceClaim and Job to test DRA | COMMENT |
| MEDIUM | tests/e2e/scenarios/clusterapi/run-test.sh | 71 | # Create a Cluster API Cluster object | COMMENT |
| MEDIUM | tests/e2e/scenarios/clusterapi/run-test.sh | 74 | # Create a MachineDeployment matching our configuration | COMMENT |
| MEDIUM | …resources/addons/networking.cilium.io/helm-values.yaml | 1 | # This file is only used to help generate the .yaml.template file | COMMENT |
| MEDIUM | hack/dev-build-aws.sh | 46 | # Create the state-store bucket if it doesn't exist | COMMENT |
| MEDIUM | hack/generate-asset-hashes.sh | 30 | # This file is generated by generate-asset-hashes.sh | COMMENT |
| MEDIUM | hack/generate-asset-hashes.sh | 64 | # This file is generated by generate-asset-hashes.sh | COMMENT |
| MEDIUM | hack/generate-asset-hashes.sh | 97 | # This file is generated by generate-asset-hashes.sh | COMMENT |
| MEDIUM | hack/generate-asset-hashes.sh | 131 | # This file is generated by generate-asset-hashes.sh | COMMENT |
| MEDIUM | hack/dev-build-gce.sh | 45 | # Create the state-store bucket if it doesn't exist | COMMENT |
| MEDIUM | hack/dev-build-scaleway.sh | 50 | # Create the state-store bucket if it doesn't exist | COMMENT |
| MEDIUM | hack/mkdocs_macros/feature_stability_table.py | 41 | # Create the initial strings to which we'll concatenate the relevant columns | COMMENT |
| MEDIUM | hack/mkdocs_macros/feature_stability_table.py | 60 | # Create a list object containing all the table rows, | COMMENT |
| MEDIUM | pkg/assets/assetdata/k8s-1.32.yaml | 1 | # This file is generated by generate-asset-hashes.sh | COMMENT |
| MEDIUM | pkg/assets/assetdata/k8s-1.33.yaml | 1 | # This file is generated by generate-asset-hashes.sh | COMMENT |
| MEDIUM | pkg/assets/assetdata/cni-1.7.yaml | 1 | # This file is generated by generate-asset-hashes.sh | COMMENT |
| MEDIUM | pkg/assets/assetdata/k8s-1.34.yaml | 1 | # This file is generated by generate-asset-hashes.sh | COMMENT |
| MEDIUM | pkg/assets/assetdata/containerd-2.1.yaml | 1 | # This file is generated by generate-asset-hashes.sh | COMMENT |
| MEDIUM | pkg/assets/assetdata/k8s-1.35.yaml | 1 | # This file is generated by generate-asset-hashes.sh | COMMENT |
| MEDIUM | pkg/assets/assetdata/cni-1.6.yaml | 1 | # This file is generated by generate-asset-hashes.sh | COMMENT |
| MEDIUM | pkg/assets/assetdata/runc-1.3.yaml | 1 | # This file is generated by generate-asset-hashes.sh | COMMENT |
| MEDIUM | pkg/assets/assetdata/containerd-2.2.yaml | 1 | # This file is generated by generate-asset-hashes.sh | COMMENT |
| MEDIUM | pkg/assets/assetdata/cni-1.9.yaml | 1 | # This file is generated by generate-asset-hashes.sh | COMMENT |
| MEDIUM | pkg/assets/assetdata/k8s-1.36.yaml | 1 | # This file is generated by generate-asset-hashes.sh | COMMENT |
| MEDIUM | pkg/assets/assetdata/k8s-1.37.yaml | 1 | # This file is generated by generate-asset-hashes.sh | COMMENT |
| MEDIUM | pkg/assets/assetdata/cni-1.8.yaml | 1 | # This file is generated by generate-asset-hashes.sh | COMMENT |
| MEDIUM | pkg/assets/assetdata/containerd-2.3.yaml | 1 | # This file is generated by generate-asset-hashes.sh | COMMENT |
| MEDIUM | pkg/assets/assetdata/runc-1.5.yaml | 1 | # This file is generated by generate-asset-hashes.sh | COMMENT |
| MEDIUM | pkg/assets/assetdata/runc-1.4.yaml | 1 | # This file is generated by generate-asset-hashes.sh | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 141 | value = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 214 | value = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 266 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 278 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 290 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 302 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 336 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 355 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 372 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 384 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 397 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 410 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 426 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 479 | "Owner" = "John Do | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 495 | "Owner" = "John Do | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 511 | "Owner" = "John Do | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 525 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 592 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 605 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 618 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 629 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 656 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 699 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 721 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 778 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 790 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 987 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 1000 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 1013 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 1315 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 1329 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 1346 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 1363 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 1380 | "Owner" = "John Doe" | CODE |
| LOW | tests/integration/update_cluster/complex/kubernetes.tf | 1392 | "Owner" = "John Doe" | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 123 | value = "John Doe" | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 200 | value = "John Doe" | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 257 | "Owner" = "John Doe" | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 269 | "Owner" = "John Doe" | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 281 | "Owner" = "John Doe" | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 293 | "Owner" = "John Doe" | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 327 | "Owner" = "John Doe" | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 346 | "Owner" = "John Doe" | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 363 | "Owner" = "John Doe" | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 375 | "Owner" = "John Doe" | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 387 | "Owner" = "John Doe" | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 399 | "Owner" = "John Doe" | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 425 | "Owner" = "John Doe" | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 438 | "Owner" = "John Doe" | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 490 | "Owner" = "John Do | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 507 | "Owner" = "John Do | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 524 | "Owner" = "John Do | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 539 | "Owner" = "John Doe" | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 595 | "Owner" = "John Doe" | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 609 | "Owner" = "John Doe" | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 623 | "Owner" = "John Doe" | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 635 | "Owner" = "John Doe" | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 658 | "Owner" = "John Doe" | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 689 | "Owner" = "John Doe" | CODE |
| LOW | …egration/update_cluster/externalpolicies/kubernetes.tf | 734 | "Owner" = "John Doe" | CODE |
| 57 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | …g/dnsprovider/providers/google/clouddns/rrchangeset.go | 61 | service := rrsets.zone.zones.interface_.service.Changes() | CODE |
| CRITICAL | upup/pkg/fi/ca.go | 222 | if privateKey == nil && k.Primary.Certificate.Certificate.SerialNumber.Cmp(idNumber) <= 0 { | CODE |
| CRITICAL | upup/pkg/fi/cloudup/template_functions.go | 456 | dest["EnableSQSTerminationDraining"] = func() bool { return cluster.Spec.CloudProvider.AWS.NodeTerminationHandler.IsQu | CODE |
| CRITICAL | pkg/apis/kops/cluster_test.go | 190 | resolved := cluster.Spec.CloudProvider.AWS.WarmPool.ResolveDefaults(&instanceGroup) | CODE |
| CRITICAL | pkg/apis/kops/validation/instancegroup.go | 317 | warmPool := cluster.Spec.CloudProvider.AWS.WarmPool.ResolveDefaults(g) | CODE |
| CRITICAL | pkg/model/components/kubecontrollermanager_test.go | 63 | t.Fatalf("AttachDetachReconcileSyncPeriod should be set to 1m - %s, for k8s version %s", c.Spec.KubeControllerManager | CODE |
| CRITICAL | pkg/model/components/kubecontrollermanager_test.go | 90 | t.Fatalf("AttachDetachReconcileSyncPeriod should be set to 5m - %s, for k8s version %s", c.Spec.KubeControllerManager. | CODE |
| CRITICAL | pkg/model/awsmodel/autoscalinggroup.go | 99 | warmPool := b.Cluster.Spec.CloudProvider.AWS.WarmPool.ResolveDefaults(ig) | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …r_runtime_management/driver_runtime_management_test.go | 37 | // Step 1: Identify GPU nodes | COMMENT |
| LOW | …r_runtime_management/driver_runtime_management_test.go | 63 | // Step 2: Verify GPU Operator DaemonSet is deployed and healthy | COMMENT |
| LOW | …r_runtime_management/driver_runtime_management_test.go | 91 | // Step 3: Verify driver installation on GPU nodes using a diagnostic job | COMMENT |
| LOW | …r_runtime_management/driver_runtime_management_test.go | 122 | // Step 4: Check for DRA integration (future-proofing) | COMMENT |
| LOW | hack/new-iam-user.sh | 24 | # WARNING: This script will return secrets! | COMMENT |
| LOW⚡ | docs/e2e-failure-troubleshooting.md | 189 | ### Step 1: Identify the failure type | COMMENT |
| LOW⚡ | docs/e2e-failure-troubleshooting.md | 195 | ### Step 2: Read the build log | COMMENT |
| LOW⚡ | docs/e2e-failure-troubleshooting.md | 199 | ### Step 3: Check Kubernetes API resource dumps | COMMENT |
| LOW⚡ | docs/e2e-failure-troubleshooting.md | 207 | ### Step 4: Check pod container logs | COMMENT |
| LOW⚡ | docs/e2e-failure-troubleshooting.md | 217 | ### Step 5: Check node-level logs | COMMENT |
| LOW⚡ | docs/e2e-failure-troubleshooting.md | 226 | ### Step 6: Check networking state | COMMENT |
| LOW⚡ | docs/e2e-failure-troubleshooting.md | 236 | ### Step 7: Check cluster configuration | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | cmd/kops-controller/main.go | 67 | // +kubebuilder:scaffold:imports | COMMENT |
| MEDIUM | cmd/kops-controller/main.go | 75 | // +kubebuilder:scaffold:scheme | COMMENT |
| MEDIUM | cmd/kops-controller/main.go | 269 | // +kubebuilder:scaffold:builder | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …r_runtime_management/driver_runtime_management_test.go | 37 | // Step 1: Identify GPU nodes | COMMENT |
| LOW | …r_runtime_management/driver_runtime_management_test.go | 63 | // Step 2: Verify GPU Operator DaemonSet is deployed and healthy | COMMENT |
| LOW | …r_runtime_management/driver_runtime_management_test.go | 91 | // Step 3: Verify driver installation on GPU nodes using a diagnostic job | COMMENT |
| LOW | …r_runtime_management/driver_runtime_management_test.go | 122 | // Step 4: Check for DRA integration (future-proofing) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | upup/pkg/fi/fitasks/mirrorkeystore.go | 54 | // TODO: implement Find so that we aren't always mirroring | COMMENT |
| LOW | upup/pkg/fi/fitasks/mirrorsecrets.go | 55 | // TODO: implement Find so that we aren't always mirroring | COMMENT |
| LOW | pkg/controllers/clusterapi/kopsconfig_controller.go | 194 | // TODO: Fix validation | COMMENT |
| LOW | pkg/client/simple/vfsclientset/clientset.go | 217 | // TODO: implement deletion of discovery service resources | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | cmd/kops/export_kubeconfig.go | 43 | # export a kubeconfig file with the cluster admin user (make sure you keep this user safe!) | COMMENT |
| LOW | hack/dev-build.sh | 29 | # and make sure you `aws configure` | COMMENT |
| MEDIUM | third_party/forked/text/template/doc.go | 442 | constant. Here is a simple example: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | hack/boilerplate/boilerplate.py | 75 | except Exception as exc: | CODE |
| MEDIUM | hack/boilerplate/boilerplate.py | 72 | def file_passes(filename, refs, regexs): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | hack/dev-build.sh | 31 | # # Example usage | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | hack/mkdocs_macros/__init__.py | 18 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | hack/boilerplate/boilerplate.py | 164 | CODE |