Production-Grade Container Scheduling and Management
6842 matches across 17 categories. Click a row to expand file-level details.
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | cmd/kube-controller-manager/names/controller_names.go | 21 | // NAMING CONVENTIONS |
| LOW | cmd/importverifier/importverifier.go | 41 | |
| LOW | cmd/cloud-controller-manager/providers.go | 21 | |
| LOW | cmd/kubeadm/app/componentconfigs/fakeconfig_test.go | 41 | kubeadmutil "k8s.io/kubernetes/cmd/kubeadm/app/util" |
| LOW | cmd/kubeadm/app/cmd/util/documentation.go | 21 | ) |
| LOW | cmd/kubeadm/app/cmd/phases/workflow/runner.go | 61 | // more than one time) |
| LOW | cmd/kubeadm/app/cmd/phases/workflow/phase.go | 61 | // RunIf define a function that implements a condition that should be checked |
| LOW | cmd/kubeadm/app/apis/bootstraptoken/v1/types.go | 21 | ) |
| LOW | cmd/kubeadm/app/apis/bootstraptoken/v1/types.go | 41 | // Usages describes the ways in which this token can be used. Can by default be used |
| LOW | cmd/kubeadm/app/apis/output/doc.go | 21 | // The purpose of the kubeadm structured output is to have a well |
| LOW | cmd/kubeadm/app/apis/output/v1alpha3/doc.go | 21 | // Package v1alpha3 defines the v1alpha3 version of the kubeadm data structures |
| LOW | cmd/kubeadm/app/apis/kubeadm/types.go | 41 | |
| LOW | cmd/kubeadm/app/apis/kubeadm/types.go | 101 | // ControlPlaneEndpoint sets a stable IP address or DNS name for the control plane; it |
| LOW | cmd/kubeadm/app/apis/kubeadm/types.go | 241 | CRISocket string |
| LOW | cmd/kubeadm/app/apis/kubeadm/types.go | 301 | // ExtraArgs are extra arguments provided to the etcd binary |
| LOW | cmd/kubeadm/app/apis/kubeadm/types.go | 321 | type ExternalEtcd struct { |
| LOW | cmd/kubeadm/app/apis/kubeadm/types.go | 421 | APIServerEndpoint string |
| LOW | cmd/kubeadm/app/apis/kubeadm/types.go | 481 | ReadOnly bool |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go | 41 | |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go | 61 | // The certificate key is a hex encoded string that is an AES key of size 32 bytes. |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go | 101 | // In case the ControlPlaneEndpoint is not specified, the AdvertiseAddress + BindPort |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go | 121 | // Scheduler contains extra settings for the scheduler control plane component |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go | 141 | ImageRepository string `json:"imageRepository,omitempty"` |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go | 161 | CertificateValidityPeriod *metav1.Duration `json:"certificateValidityPeriod,omitempty"` |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go | 261 | // KubeletExtraArgs passes through extra arguments to the kubelet. The arguments here are passed to the kubelet command |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go | 281 | // ImagePullSerial specifies if image pulling performed by kubeadm must be done serially or in parallel. |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go | 321 | // Defaults to "/var/lib/etcd". |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go | 341 | // PeerCertSANs sets extra Subject Alternative Names for the etcd peer signing cert. |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go | 401 | |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go | 421 | } |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go | 461 | // APIServerEndpoint is an IP or domain name to the API server from which info will be fetched. |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go | 501 | // PathType is the type of the HostPath. |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go | 541 | |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go | 601 | |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go | 621 | // for a joining node. |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go | 641 | KubernetesVersion string `json:"kubernetesVersion,omitempty"` |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go | 681 | // PrintConfig specifies whether the configuration file that will be used in the upgrade should be printed or not. |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go | 701 | // UpgradeDiffConfiguration contains a list of configurable options which are specific to the "kubeadm upgrade diff" com |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go | 721 | DryRun *bool `json:"dryRun,omitempty"` |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go | 741 | |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go | 761 | // Default: false |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go | 21 | |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go | 41 | // - Support custom environment variables in control plane components under `ClusterConfiguration`. |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go | 61 | // by `Timeouts.ControlPlaneComponentHealthCheck`. The `JoinConfiguration.Discovery.Timeout` is replaced by |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go | 81 | // A kubeadm config file could contain multiple configuration types separated using three dashes ("---"). |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go | 101 | // kind: ResetConfiguration |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go | 121 | // relevance for security (e.g. enforce authorization-mode Node and RBAC on api server) |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go | 141 | // is executed, including: |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go | 161 | // ... |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go | 181 | // |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go | 201 | // - token: "9a08jv.c0izixklcxtmnze7" |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go | 221 | // ignorePreflightErrors: |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go | 241 | // imageTag: "3.2.24" |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go | 261 | // serviceSubnet: "10.96.0.0/16" |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go | 281 | // - "ec2-10-100-0-1.compute-1.amazonaws.com" |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go | 301 | // pathType: File |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go | 321 | // When executing kubeadm join with the --config option, the JoinConfiguration type should be provided. |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go | 341 | // |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta4/doc.go | 361 | // ... |
| LOW | cmd/kubeadm/app/apis/kubeadm/v1beta3/types.go | 41 | |
| 6355 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | cluster/gce/util.sh | 3252 | # Create a single firewall rule for all minions. |
| MEDIUM | cluster/gce/gci/configure-helper.sh | 866 | # Create a static Bearer token and kubeconfig for extra, comma-separated components. |
| MEDIUM | cluster/gce/gci/configure-helper.sh | 1741 | # Create the log file and set its properties. |
| MEDIUM | cluster/gce/gci/configure-helper.sh | 2934 | # Create a new directory for the DNS addon and prepend a "0" on the name. |
| MEDIUM | cluster/gce/gci/configure-helper.sh | 3350 | # This function is adapted from the detect_client_info function in cluster/get-kube-binaries.sh |
| MEDIUM | cluster/gce/gci/configure.sh | 844 | # This function is adapted from the detect_client_info function in cluster/get-kube-binaries.sh |
| MEDIUM | cluster/gce/gci/configure-kubeapiserver.sh | 146 | # Create the audit policy file, and mount it into the apiserver pod. |
| MEDIUM | cluster/gce/gci/configure-kubeapiserver.sh | 191 | # Create the audit webhook config file, and mount it into the apiserver pod. |
| MEDIUM | cluster/gce/gci/configure-kubeapiserver.sh | 285 | # Create the ABAC file if it doesn't exist yet, or if we have a KUBE_USER set (to ensure the right user is given per |
| MEDIUM | cluster/gce/gci/configure-kubeapiserver.sh | 322 | # Create the EgressSelectorConfiguration yaml file to control the Egress Selector. |
| MEDIUM | cluster/log-dump/log-dump.sh | 568 | # Create the logexporter namespace, service-account secret and the logexporter daemonset within that namespace. |
| MEDIUM | …io/apiserver/plugin/pkg/authorizer/webhook/gencerts.sh | 49 | # Create a certificate authority |
| MEDIUM | …io/apiserver/plugin/pkg/authorizer/webhook/gencerts.sh | 53 | # Create a second certificate authority |
| MEDIUM | …io/apiserver/plugin/pkg/authorizer/webhook/gencerts.sh | 57 | # Create a server certiticate |
| MEDIUM | …io/apiserver/plugin/pkg/authorizer/webhook/gencerts.sh | 62 | # Create a client certiticate |
| MEDIUM | …ging/src/k8s.io/apiserver/pkg/util/webhook/gencerts.sh | 74 | # Create a certificate authority |
| MEDIUM | …ging/src/k8s.io/apiserver/pkg/util/webhook/gencerts.sh | 78 | # Create a second certificate authority |
| MEDIUM | …ging/src/k8s.io/apiserver/pkg/util/webhook/gencerts.sh | 82 | # Create an intermediate certificate authority |
| MEDIUM | …ging/src/k8s.io/apiserver/pkg/util/webhook/gencerts.sh | 87 | # Create an intermediate certificate authority with sha1 signature |
| MEDIUM | …ging/src/k8s.io/apiserver/pkg/util/webhook/gencerts.sh | 91 | # Create a server certiticate |
| MEDIUM | …ging/src/k8s.io/apiserver/pkg/util/webhook/gencerts.sh | 96 | # Create a server certiticate w/o SAN |
| MEDIUM | …ging/src/k8s.io/apiserver/pkg/util/webhook/gencerts.sh | 100 | # Create a server certiticate with SHA1 signature signed by OK intermediate CA |
| MEDIUM | …ging/src/k8s.io/apiserver/pkg/util/webhook/gencerts.sh | 104 | # Create a server certiticate signed by SHA1-signed intermediate CA |
| MEDIUM | …ging/src/k8s.io/apiserver/pkg/util/webhook/gencerts.sh | 108 | # Create a client certiticate |
| MEDIUM | …ver/pkg/admission/plugin/webhook/testcerts/gencerts.sh | 56 | # Create a certificate authority |
| MEDIUM | …ver/pkg/admission/plugin/webhook/testcerts/gencerts.sh | 60 | # Create a second certificate authority |
| MEDIUM | …ver/pkg/admission/plugin/webhook/testcerts/gencerts.sh | 64 | # Create a server certiticate |
| MEDIUM | …ver/pkg/admission/plugin/webhook/testcerts/gencerts.sh | 69 | # Create a client certiticate |
| MEDIUM | staging/src/k8s.io/kubectl/pkg/cmd/kuberc/kuberc.go | 40 | # Create an alias for a command |
| MEDIUM | staging/src/k8s.io/kubectl/pkg/cmd/kuberc/set.go | 64 | # Create an alias 'getn' for 'get' command with prepended 'nodes' resource |
| MEDIUM | staging/src/k8s.io/kubectl/pkg/cmd/kuberc/set.go | 67 | # Create an alias 'runx' for 'run' command with appended arguments |
| MEDIUM | staging/src/k8s.io/kubectl/pkg/cmd/expose/expose.go | 67 | # Create a service for a replicated nginx, which serves on port 80 and connects to the containers on port 8000 |
| MEDIUM | staging/src/k8s.io/kubectl/pkg/cmd/expose/expose.go | 70 | # Create a service for a replication controller identified by type and name specified in "nginx-controller.yaml", whic |
| MEDIUM | staging/src/k8s.io/kubectl/pkg/cmd/expose/expose.go | 73 | # Create a service for a pod valid-pod, which serves on port 444 with the name "frontend" |
| MEDIUM | staging/src/k8s.io/kubectl/pkg/cmd/expose/expose.go | 76 | # Create a second service based on the above service, exposing the container port 8443 as port 443 with the name "ngin |
| MEDIUM | staging/src/k8s.io/kubectl/pkg/cmd/expose/expose.go | 79 | # Create a service for a replicated streaming application on port 4100 balancing UDP traffic and named 'video-stream'. |
| MEDIUM | staging/src/k8s.io/kubectl/pkg/cmd/expose/expose.go | 82 | # Create a service for a replicated nginx using replica set, which serves on port 80 and connects to the containers on |
| MEDIUM | staging/src/k8s.io/kubectl/pkg/cmd/expose/expose.go | 85 | # Create a service for an nginx deployment, which serves on port 80 and connects to the containers on port 8000 |
| MEDIUM | …ging/src/k8s.io/kubectl/pkg/cmd/create/create_quota.go | 45 | # Create a new resource quota named my-quota |
| MEDIUM | …ging/src/k8s.io/kubectl/pkg/cmd/create/create_quota.go | 48 | # Create a new resource quota named best-effort |
| MEDIUM | …k8s.io/kubectl/pkg/cmd/create/create_serviceaccount.go | 44 | # Create a new service account named my-service-account |
| MEDIUM | staging/src/k8s.io/kubectl/pkg/cmd/create/create.go | 72 | # Create a pod using the data in pod.json |
| MEDIUM | staging/src/k8s.io/kubectl/pkg/cmd/create/create.go | 75 | # Create a pod based on the JSON passed into stdin |
| MEDIUM | …/k8s.io/kubectl/pkg/cmd/create/create_priorityclass.go | 44 | # Create a priority class named high-priority |
| MEDIUM | …/k8s.io/kubectl/pkg/cmd/create/create_priorityclass.go | 47 | # Create a priority class named default-priority that is considered as the global default priority |
| MEDIUM | …/k8s.io/kubectl/pkg/cmd/create/create_priorityclass.go | 50 | # Create a priority class named high-priority that cannot preempt pods with lower priority |
| MEDIUM | …src/k8s.io/kubectl/pkg/cmd/create/create_secret_tls.go | 48 | # Create a new TLS secret named tls-secret with the given key pair |
| MEDIUM | …ng/src/k8s.io/kubectl/pkg/cmd/create/create_service.go | 236 | # Create a new ClusterIP service named my-cs |
| MEDIUM | …ng/src/k8s.io/kubectl/pkg/cmd/create/create_service.go | 239 | # Create a new ClusterIP service named my-cs (in headless mode) |
| MEDIUM | …ng/src/k8s.io/kubectl/pkg/cmd/create/create_service.go | 277 | # Create a new NodePort service named my-ns |
| MEDIUM | …ng/src/k8s.io/kubectl/pkg/cmd/create/create_service.go | 314 | # Create a new LoadBalancer service named my-lbs |
| MEDIUM | …ng/src/k8s.io/kubectl/pkg/cmd/create/create_service.go | 354 | # Create a new ExternalName service named my-ns |
| MEDIUM | …aging/src/k8s.io/kubectl/pkg/cmd/create/create_role.go | 47 | # Create a role named "pod-reader" that allows user to perform "get", "watch" and "list" on pods |
| MEDIUM | …aging/src/k8s.io/kubectl/pkg/cmd/create/create_role.go | 50 | # Create a role named "pod-reader" with ResourceName specified |
| MEDIUM | …aging/src/k8s.io/kubectl/pkg/cmd/create/create_role.go | 53 | # Create a role named "foo" with API Group specified |
| MEDIUM | …aging/src/k8s.io/kubectl/pkg/cmd/create/create_role.go | 56 | # Create a role named "foo" with SubResource specified |
| MEDIUM | …ing/src/k8s.io/kubectl/pkg/cmd/create/create_secret.go | 84 | # Create a new secret named my-secret with keys for each file in folder bar |
| MEDIUM | …ing/src/k8s.io/kubectl/pkg/cmd/create/create_secret.go | 87 | # Create a new secret named my-secret with specified keys instead of names on disk |
| MEDIUM | …ing/src/k8s.io/kubectl/pkg/cmd/create/create_secret.go | 90 | # Create a new secret named my-secret with key1=supersecret and key2=topsecret |
| MEDIUM | …ing/src/k8s.io/kubectl/pkg/cmd/create/create_secret.go | 93 | # Create a new secret named my-secret using a combination of a file and a literal |
| 113 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | cmd/cloud-controller-manager/main.go | 23 | // The current file demonstrate how other cloud provider should leverage CCM and it uses fake parameters. Please modify |
| MEDIUM | cluster/gce/util.sh | 2325 | # TODO(zmerlynn): To make this really robust, we need to parse the output and |
| MEDIUM | staging/src/k8s.io/client-go/example_test.go | 187 | // have more robust logic and a workqueue. |
| MEDIUM | staging/src/k8s.io/client-go/doc.go | 91 | // found or already exists. This allows controllers to implement robust, |
| MEDIUM | staging/src/k8s.io/client-go/tools/cache/reflector.go | 896 | // we utilize the temporaryStore to ensure independence from the current store implementation. |
| MEDIUM | …lient-go/applyconfigurations/core/v1/endpointsubset.go | 41 | // should be considered safe for load balancers and clients to utilize. |
| MEDIUM | …o/applyconfigurations/resource/v1/celdeviceselector.go | 66 | // A robust expression should check for the existence of attributes |
| MEDIUM | …lyconfigurations/resource/v1beta2/celdeviceselector.go | 66 | // A robust expression should check for the existence of attributes |
| MEDIUM | …lyconfigurations/resource/v1beta1/celdeviceselector.go | 66 | // A robust expression should check for the existence of attributes |
| MEDIUM | …aging/src/k8s.io/cri-api/pkg/apis/runtime/v1/api.pb.go | 1889 | // sandbox, and the runtime should leverage this to ensure correct |
| MEDIUM | …aging/src/k8s.io/cri-api/pkg/apis/runtime/v1/api.pb.go | 5626 | // container, and the runtime should leverage this to ensure correct |
| MEDIUM | …8s.io/dynamic-resource-allocation/kubeletplugin/doc.go | 61 | // https://github.com/kubernetes/kubernetes/blob/v1.33.0/pkg/kubelet/pluginmanager/pluginwatcher/README.md#seamless-upgr |
| MEDIUM | …8s.io/dynamic-resource-allocation/kubeletplugin/doc.go | 61 | // https://github.com/kubernetes/kubernetes/blob/v1.33.0/pkg/kubelet/pluginmanager/pluginwatcher/README.md#seamless-upgr |
| MEDIUM | staging/src/k8s.io/api/core/v1/types.go | 6445 | // should be considered safe for load balancers and clients to utilize. |
| MEDIUM | staging/src/k8s.io/api/resource/v1/types.go | 1353 | // A robust expression should check for the existence of attributes |
| MEDIUM | staging/src/k8s.io/api/resource/v1beta2/types.go | 1493 | // A robust expression should check for the existence of attributes |
| MEDIUM | staging/src/k8s.io/api/resource/v1alpha3/types.go | 72 | // A robust expression should check for the existence of attributes |
| MEDIUM | staging/src/k8s.io/api/resource/v1beta1/types.go | 1350 | // A robust expression should check for the existence of attributes |
| MEDIUM | …ng/src/k8s.io/apiserver/pkg/apis/apiserver/v1/types.go | 185 | // For more nuanced audience validation, use claimValidationRules. |
| MEDIUM | …c/k8s.io/apiserver/pkg/apis/apiserver/v1beta1/types.go | 269 | // For more nuanced audience validation, use claimValidationRules. |
| MEDIUM | …/k8s.io/apiserver/pkg/apis/apiserver/v1alpha1/types.go | 298 | // For more nuanced audience validation, use claimValidationRules. |
| MEDIUM | …s.io/apiserver/pkg/storage/cacher/store/store_btree.go | 32 | // Intention is to utilize btree for its cheap snapshots that don't require locking if don't mutate data. |
| MEDIUM | …ging/src/k8s.io/apimachinery/pkg/labels/labels_test.go | 34 | // TODO: Make our label representation robust enough to handle labels |
| MEDIUM | …aging/src/k8s.io/component-base/zpages/features/doc.go | 20 | // New zpages added to Kubernetes components should utilize this feature set |
| MEDIUM | test/cmd/apps.sh | 619 | # TODO: test robust scaling in an e2e. |
| MEDIUM | test/e2e_node/podresources_test.go | 1902 | // for more robust check, also do a Consistently check |
| MEDIUM | test/e2e_node/remote/remote.go | 259 | // journald nodes. We should have a more robust way to collect logs. |
| MEDIUM | test/integration/controlplane/kube_apiserver_test.go | 664 | // TODO(roycaihw): expose response header in rest client and utilize etag here |
| MEDIUM | test/integration/storageversionmigrator/util.go | 623 | // We utilize the LastSyncResourceVersion of the Garbage Collector (GC) to ensure that the cache is up-to-date before |
| MEDIUM | test/utils/crd/crd_util.go | 73 | // Be robust about making the crd creation call. |
| MEDIUM | test/utils/image/manifest.go | 108 | // Essentially curl url | writer |
| MEDIUM | test/e2e/framework/util.go | 342 | // Be robust about making the namespace creation call. |
| MEDIUM | test/e2e/network/conntrack.go | 548 | // Proxy implementations (which leverage conntrack) can either drop packets |
| MEDIUM | test/e2e/network/netpol/kubemanager.go | 55 | // kubeManager provides a convenience interface to kube functionality that we leverage for polling NetworkPolicy connect |
| MEDIUM | test/e2e/storage/static_pods.go | 44 | // Kind runs its API server as a static Pod, and we leverage it here |
| MEDIUM | test/e2e/storage/drivers/in_tree.go | 1195 | // During end-to-end (e2e) testing, we utilize the `/tmp` directory for volume creation. |
| MEDIUM | test/e2e/dra/utils/deploy.go | 362 | // for different pods and thus seamless upgrades. Must be supported by the kubelet! |
| LOW | …ng-manifests/statefulset/mysql-galera/statefulset.yaml | 61 | # TODO: If docker exec is buggy just use registry.k8s.io/mysql-healthz:1.0 |
| MEDIUM | hack/ginkgo-e2e.sh | 48 | # - `dlv exec` if set to "delve" |
| MEDIUM | hack/make-rules/test-e2e-node.sh | 61 | # - `dlv exec` if set to "delve" |
| LOW | hack/lib/golang.sh | 598 | # * We can't just set GOBIN because that does not work on cross-compiles. |
| LOW | hack/lib/golang.sh | 648 | # Ideally this wouldn't be necessary and we could just set GOBIN to |
| LOW | third_party/forked/shell2junit/sh2ju.sh | 177 | # file exists. Need to append to it. If we remove the testsuite end tag, we can just add it in after. |
| MEDIUM | pkg/apis/resource/types.go | 1258 | // A robust expression should check for the existence of attributes |
| MEDIUM | pkg/scheduler/backend/queue/backoff_queue.go | 81 | // providing seamless access as if it were one queue. |
| MEDIUM | …ontroller/devicetainteviction/device_taint_eviction.go | 1584 | // Not created yet or unsupported. Definitely not tainted. |
| MEDIUM | pkg/controller/resourceclaim/controller.go | 1362 | // Check if the ReservedFor entries are all still valid. Essentially we are |
| MEDIUM | pkg/controller/job/job_scheduling_manager.go | 90 | // by a more robust mechanism before beta. |
| MEDIUM | pkg/kubelet/stats/cadvisor_stats_provider.go | 493 | // creation time. However, to make the logic here robust, we break the |
| MEDIUM | pkg/volume/plugins.go | 488 | // not necessarily all plugins. The preference is to leverage strong typing |
| MEDIUM | pkg/volume/util/subpath/subpath_linux.go | 257 | // The original traversal method here was ReadDir, which was not so robust to handle some error such as "stale NFS fil |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | cmd/kubeadm/app/util/etcd/etcd.go | 697 | // Step 1: get the cluster status first |
| LOW | cmd/kubeadm/app/util/etcd/etcd.go | 730 | // Step 2: evaluate the cluster status |
| LOW | cluster/gce/util.sh | 3082 | # Step 1: Detach master IP address and attach ephemeral address to the existing master |
| LOW | cluster/gce/util.sh | 3085 | # Step 2: Create target pool. |
| LOW | cluster/gce/util.sh | 3090 | # Step 3: Create forwarding rule. |
| LOW | cluster/gce/util.sh | 3067 | # Step 0: Return early if LB is already configured. |
| LOW | …aging/src/k8s.io/client-go/tools/watch/retrywatcher.go | 101 | // and we need to check if stop wasn't requested while doing so. |
| LOW | …controllers/nodelifecycle/node_lifecycle_controller.go | 152 | // At this point the node has NotReady status, we need to check if the node has been removed |
| LOW | …ource-allocation/structured/internal/allocatedstate.go | 70 | // We need to check if any shared device ID corresponds to our device. |
| LOW | …/pkg/util/flowcontrol/fairqueuing/queueset/queueset.go | 314 | // Step 0: |
| LOW | …/pkg/util/flowcontrol/fairqueuing/queueset/queueset.go | 329 | // Step 1: |
| LOW | …/pkg/util/flowcontrol/fairqueuing/queueset/queueset.go | 345 | // Step 2: |
| LOW | …/pkg/util/flowcontrol/fairqueuing/queueset/queueset.go | 401 | // Step 3: |
| LOW | …erver/pkg/admission/plugin/resourcequota/controller.go | 373 | // if a resource is consumed, we need to check if it matches on the limited resource list. |
| LOW | test/integration/framework/util.go | 113 | // For NodeReady we need to check if Taints are gone as well |
| LOW | test/integration/job/job_test.go | 3524 | // Step 0: create job. |
| LOW | test/integration/job/job_test.go | 3546 | // Step 2: Delete the Job while the controller is stopped. |
| LOW | test/integration/job/job_test.go | 3555 | // Step 3: Restart controller. |
| LOW | test/e2e/framework/node/resource.go | 100 | // For NodeReady we need to check if Taints are gone as well |
| LOW | test/e2e/network/networking_perf.go | 160 | // Step 1: set up iperf2 server -- a single pod on any node |
| LOW | test/e2e/network/networking_perf.go | 167 | // Step 2: set up iperf2 client daemonset |
| LOW | test/e2e/network/networking_perf.go | 232 | // Step 3: iterate through the client pods one by one, running iperf2 in client mode to transfer |
| LOW | test/e2e/network/networking_perf.go | 266 | // Step 4: after collecting all the client<->server data, compile and present the results |
| LOW | pkg/proxy/winkernel/proxier_test.go | 2275 | // Step 3: Add svc3 with a local endpoint at IP-B (same IP as the remote endpoint). |
| LOW | pkg/proxy/winkernel/proxier_test.go | 2342 | // Step 4: Remove endpoint slices for svc1 and svc2 (IPs A and B disappear). |
| LOW | pkg/proxy/winkernel/proxier_test.go | 2557 | // Step 3: Inject LB delete failure and transition endpoints from |
| LOW | pkg/proxy/winkernel/proxier_test.go | 2626 | // Step 4: Assert the results. |
| LOW | …framework/plugins/dynamicresources/dynamicresources.go | 1378 | // We need to check if the device is attached to the node. |
| LOW | pkg/scheduler/backend/cache/cache_test.go | 1525 | // Step 1: the node was added into cache successfully. |
| LOW | pkg/scheduler/backend/cache/cache_test.go | 1550 | // Step 2: dump cached nodes successfully. |
| LOW | pkg/scheduler/backend/cache/cache_test.go | 1568 | // Step 3: update node attribute successfully. |
| LOW | pkg/scheduler/backend/cache/cache_test.go | 1598 | // Step 4: the node can be removed even if it still has pods. |
| LOW | pkg/scheduler/backend/cache/cache_test.go | 1632 | // Step 5: removing pods for the removed node still succeeds. |
| LOW | pkg/scheduler/backend/queue/scheduling_queue.go | 594 | // We need to check if those plugins return Queue or not and if they do, we return queueImmediately. |
| LOW | pkg/controller/resourcepoolstatusrequest/controller.go | 277 | // Step 1: Aggregate pool data from ResourceSlices. |
| LOW | pkg/controller/resourcepoolstatusrequest/controller.go | 362 | // Step 2: Count allocations from ResourceClaims |
| LOW | pkg/controller/resourcepoolstatusrequest/controller.go | 381 | // Step 3: Build pool status list, marking incomplete pools with a validation error |
| LOW | pkg/kubelet/kuberuntime/kuberuntime_manager.go | 1452 | // Step 1: Compute sandbox and container changes. |
| LOW | pkg/kubelet/kuberuntime/kuberuntime_manager.go | 1467 | // Step 2: Kill the pod if the sandbox has changed. |
| LOW | pkg/kubelet/kuberuntime/kuberuntime_manager.go | 1486 | // Step 3: kill any running containers in this pod which are not to keep. |
| LOW | pkg/kubelet/kuberuntime/kuberuntime_manager.go | 1545 | // Step 4: Create a sandbox for the pod if necessary. |
| LOW | pkg/kubelet/kuberuntime/kuberuntime_manager.go | 1648 | // Step 5: invoke the sandbox ready callback before image pulling . |
| LOW | pkg/kubelet/kuberuntime/kuberuntime_manager.go | 1762 | // Step 6: start ephemeral containers |
| LOW | pkg/kubelet/kuberuntime/kuberuntime_manager.go | 1775 | // Step 7: start init containers. |
| LOW | pkg/kubelet/kuberuntime/kuberuntime_manager.go | 1812 | // Step 8: For containers in podContainerChanges.ContainersToUpdate[CPU,Memory] list, invoke UpdateContainerResources |
| LOW | pkg/kubelet/kuberuntime/kuberuntime_manager.go | 1819 | // Step 9: start containers in podContainerChanges.ContainersToStart. |
| LOW | pkg/kubelet/kuberuntime/kuberuntime_container.go | 204 | // Step 1: pull the image. |
| LOW | pkg/kubelet/kuberuntime/kuberuntime_container.go | 222 | // Step 2: create the container. |
| LOW | pkg/kubelet/kuberuntime/kuberuntime_container.go | 291 | // Step 3: start the container. |
| LOW | pkg/kubelet/kuberuntime/kuberuntime_container.go | 319 | // Step 4: execute the post start hook. |
| LOW | …/kubelet/pluginmanager/cache/desired_state_of_world.go | 141 | // because in the reconciler, we need to check if the plugin in the actual state of world is the same |
| LOW | pkg/api/v1/pod/util.go | 373 | // We are updating an existing condition, so we need to check if it has changed. |
| LOW | pkg/api/pod/util.go | 297 | // We are updating an existing condition, so we need to check if it has changed. |
| LOW | pkg/api/testing/validate_pod_level_defaults_test.go | 281 | // Step 1: Pod defaulting and validation |
| LOW | pkg/api/testing/validate_pod_level_defaults_test.go | 297 | // Step 2: Deployment defaulting and validation |
| LOW | pkg/api/testing/validate_pod_level_defaults_test.go | 320 | // Step 3: Validate the defaulted pod spec from the deployment |
| LOW | pkg/volume/volume_linux.go | 220 | // We need to check if actual permissions of root directory is a superset of permissions required by unixPerms. |
| LOW | …me/util/volumepathhandler/volume_path_handler_linux.go | 191 | // we need to check if they are pointing to the devices that have same major/minor number. |
| LOW | pkg/volume/local/local.go | 478 | // We only need to unmount block device here, so we need to check if the deviceMountPath passed here |
| Severity | File | Line | Snippet |
|---|---|---|---|
| CRITICAL | …ng/src/k8s.io/component-base/logs/api/v1/types_test.go | 224 | _ = tc.expectConfig.Options.Text.InfoBufferSize.String() |
| CRITICAL | …ng/src/k8s.io/component-base/logs/api/v1/types_test.go | 225 | _ = tc.expectConfig.Options.JSON.InfoBufferSize.String() |
| CRITICAL | test/integration/auth/rbac_test.go | 91 | storageConfig, err := getter.config.ControlPlane.Extra.StorageFactory.NewConfig(resource, example) |
| CRITICAL | test/integration/apiserver/cel/typeresolution_test.go | 204 | "self.spec.template.spec.containers.all(c, c.ports.all(p, p.containerPort < 1024))", |
| CRITICAL | pkg/controller/job/backoff_utils.go | 211 | containerState.State.Terminated.FinishedAt.Time.IsZero() { |
| CRITICAL | pkg/kubelet/allocation/allocation_manager_test.go | 1604 | cpuRequest := attrs.Pod.Spec.Resources.Requests.Cpu().Value() |
| CRITICAL | pkg/kubelet/allocation/allocation_manager_test.go | 1627 | cpuRequest := attrs.Pod.Spec.Resources.Requests.Cpu().Value() |
| CRITICAL | pkg/kubelet/allocation/allocation_manager_test.go | 1679 | cpuRequest := attrs.Pod.Spec.Resources.Requests.Cpu().Value() |
| CRITICAL | pkg/kubelet/allocation/allocation_manager_test.go | 1704 | cpuRequest := attrs.Pod.Spec.Resources.Requests.Cpu().Value() |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | cluster/get-kube.sh | 24 | # Set KUBERNETES_PROVIDER to choose between different providers: |
| LOW | cluster/get-kube.sh | 28 | # Set KUBERNETES_RELEASE to choose a specific release instead of the current |
| LOW | cluster/get-kube.sh | 31 | # Set KUBERNETES_RELEASE_URL to choose where to download binaries from. |
| LOW | cluster/get-kube.sh | 34 | # Set KUBERNETES_SERVER_ARCH to choose the server (Kubernetes cluster) |
| LOW | cluster/get-kube.sh | 41 | # Set KUBERNETES_NODE_PLATFORM to choose the platform for which to download |
| LOW | cluster/get-kube.sh | 49 | # Set KUBERNETES_NODE_ARCH to choose the node architecture to download the |
| LOW | cluster/get-kube.sh | 59 | # Set KUBERNETES_SKIP_DOWNLOAD to skip downloading a release. |
| LOW | cluster/get-kube.sh | 60 | # Set KUBERNETES_SKIP_CONFIRM to skip the installation confirmation prompt. |
| LOW | cluster/get-kube.sh | 61 | # Set KUBERNETES_SKIP_CREATE_CLUSTER to skip starting a cluster. |
| LOW | cluster/get-kube.sh | 62 | # Set KUBERNETES_SKIP_RELEASE_VALIDATION to skip trying to validate the |
| LOW | cluster/get-kube-binaries.sh | 24 | # Set KUBERNETES_SERVER_ARCH to choose the server (Kubernetes cluster) |
| LOW | cluster/get-kube-binaries.sh | 32 | # Set KUBERNETES_CLIENT_OS to choose the client OS to download: |
| LOW | cluster/get-kube-binaries.sh | 38 | # Set KUBERNETES_CLIENT_ARCH to choose the client architecture to download: |
| LOW | cluster/get-kube-binaries.sh | 47 | # Set KUBERNETES_SKIP_CONFIRM to skip the installation confirmation prompt. |
| LOW | cluster/get-kube-binaries.sh | 48 | # Set KUBERNETES_RELEASE_URL to choose where to download binaries from. |
| LOW | cluster/get-kube-binaries.sh | 50 | # Set KUBERNETES_DOWNLOAD_TESTS to additionally download and extract the test |
| LOW | cluster/addons/addon-manager/kube-addons-main.sh | 56 | # Check if the configuration has changed recently - in case the user |
| LOW | cluster/addons/addon-manager/kube-addons.sh | 121 | # Check if $resource isn't composed just of whitespaces by replacing ' ' |
| LOW | cluster/gce/config-test.sh | 323 | # Set CLUSTER_DNS_CORE_DNS to 'false' to install kube-dns instead of CoreDNS. |
| LOW | cluster/gce/config-default.sh | 282 | # Set CLUSTER_DNS_CORE_DNS to 'false' to install kube-dns instead of CoreDNS. |
| LOW | cluster/gce/util.sh | 3781 | # Check if this are any remaining master replicas. |
| LOW | cluster/gce/gci/kube-master-internal-route.sh | 22 | # Check if route is already set if not set it |
| LOW | cluster/gce/gci/configure-helper.sh | 444 | # Check if NVMe SSD specified. |
| LOW | cluster/gce/gci/configure-helper.sh | 1391 | # Set REGISTER_MASTER_KUBELET to true if kubelet on the master node |
| LOW | staging/src/k8s.io/kubectl/pkg/cmd/set/set_resources.go | 61 | # Print the result (in yaml format) of updating nginx container limits from a local, without hitting the server |
| LOW | staging/src/k8s.io/kubectl/pkg/cmd/set/set_image.go | 97 | # Print result (in yaml format) of updating nginx container image from local file, without hitting the server |
| LOW | staging/src/k8s.io/kubectl/pkg/cmd/set/set_subject.go | 52 | # Print the result (in YAML format) of updating rolebinding subjects from a local, without hitting the server |
| LOW | …g/src/k8s.io/kubectl/pkg/cmd/set/set_serviceaccount.go | 56 | # Print the result (in YAML format) of updated nginx deployment with the service account from local file, without hitti |
| LOW | test/cmd/legacy-script.sh | 23 | # Set locale to ensure english responses from kubectl commands |
| LOW | test/cmd/core.sh | 1020 | # Set command to change the selector. |
| LOW | test/cmd/core.sh | 1024 | # Set command to reset the selector back to the original one. |
| LOW | test/e2e_node/gubernator.sh | 60 | # Check if the bucket exists |
| LOW | test/e2e_node/gubernator.sh | 104 | # Check if folder for same logs already exists |
| LOW | hack/lint-dependencies.sh | 46 | # Check if unwanted dependencies are removed |
| LOW | hack/local-up-cluster.sh | 471 | # Check if the API server is still running |
| LOW | hack/local-up-cluster.sh | 475 | # Check if the controller-manager is still running |
| LOW | hack/local-up-cluster.sh | 479 | # Check if the cloud-controller-manager is still running |
| LOW | hack/local-up-cluster.sh | 483 | # Check if the kubelet is still running |
| LOW | hack/local-up-cluster.sh | 487 | # Check if the proxy is still running |
| LOW | hack/local-up-cluster.sh | 491 | # Check if the scheduler is still running |
| LOW | hack/local-up-cluster.sh | 495 | # Check if the etcd is still running |
| LOW | hack/local-up-cluster.sh | 507 | # Check if all processes are still running. Prints a warning once each time |
| LOW | hack/make-rules/test-e2e-node.sh | 159 | # Check if any of the images specified already have running instances. If so reuse those instances |
| LOW | hack/lib/version.sh | 60 | # Check if the tree is dirty. default to dirty |
| LOW | hack/lib/util.sh | 676 | # Check if we have "docker buildx" commands available |
| LOW | hack/lib/util.sh | 689 | # Check if we are using a supported bash version |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | cmd/kubeadm/app/cmd/phases/reset/cleanupnode_test.go | 200 | // Verify the files as requested by the test: |
| HIGH | cmd/kubeadm/app/constants/constants.go | 173 | // NodesUserPrefix defines the user name prefix as requested by the Node authorizer. |
| HIGH | …o/client-go/applyconfigurations/apps/v1/statefulset.go | 36 | // - Storage: As many VolumeClaims as requested. |
| HIGH | …ent-go/applyconfigurations/apps/v1beta2/statefulset.go | 38 | // - Storage: As many VolumeClaims as requested. |
| HIGH | …ent-go/applyconfigurations/apps/v1beta1/statefulset.go | 38 | // - Storage: As many VolumeClaims as requested. |
| HIGH | staging/src/k8s.io/api/apps/v1/types.go | 45 | // - Storage: As many VolumeClaims as requested. |
| HIGH | staging/src/k8s.io/api/apps/v1beta2/types.go | 103 | // - Storage: As many VolumeClaims as requested. |
| HIGH | staging/src/k8s.io/api/apps/v1beta1/types.go | 97 | // - Storage: As many VolumeClaims as requested. |
| HIGH | …aging/src/k8s.io/apimachinery/pkg/api/errors/errors.go | 673 | // be completed as requested. |
| HIGH | pkg/apis/apps/types.go | 31 | // - Storage: As many VolumeClaims as requested. |
| HIGH | pkg/registry/resource/devicetaintrule/strategy_test.go | 229 | // Stored as requested. |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | cmd/kubeadm/app/util/crypto/crypto_test.go | 36 | testData := []byte("Lorem ipsum dolor sit amet, consectetur adipiscing elit.") |
| LOW | cmd/kubeadm/app/util/crypto/crypto_test.go | 36 | testData := []byte("Lorem ipsum dolor sit amet, consectetur adipiscing elit.") |
| LOW | staging/src/k8s.io/kms/pkg/service/grpc_service_test.go | 47 | plaintext := []byte("lorem ipsum dolor sit amet") |
| LOW | staging/src/k8s.io/kms/pkg/service/grpc_service_test.go | 47 | plaintext := []byte("lorem ipsum dolor sit amet") |
| LOW | …aging/src/k8s.io/kubectl/pkg/explain/test-swagger.json | 19 | "description": "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla ut lacus ac enim vulputate impe |
| LOW | …aging/src/k8s.io/kubectl/pkg/explain/test-swagger.json | 19 | "description": "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla ut lacus ac enim vulputate impe |
| LOW | …g/src/k8s.io/kubectl/pkg/explain/model_printer_test.go | 53 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla ut lacus ac |
| LOW | …g/src/k8s.io/kubectl/pkg/explain/model_printer_test.go | 53 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla ut lacus ac |
| LOW | …g/src/k8s.io/kubectl/pkg/explain/model_printer_test.go | 75 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla ut lacus ac |
| LOW | …g/src/k8s.io/kubectl/pkg/explain/model_printer_test.go | 75 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla ut lacus ac |
| LOW | …/src/k8s.io/kubectl/pkg/explain/fields_printer_test.go | 37 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla ut lacus ac |
| LOW | …/src/k8s.io/kubectl/pkg/explain/fields_printer_test.go | 37 | Lorem ipsum dolor sit amet, consectetur adipiscing elit. Nulla ut lacus ac |
| LOW | …aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go | 32 | f.Write("Lorem ipsum dolor sit amet, consectetur adipiscing elit.") |
| LOW | …aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go | 32 | f.Write("Lorem ipsum dolor sit amet, consectetur adipiscing elit.") |
| LOW | …aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go | 38 | want := `Lorem ipsum dolor sit amet, consectetur adipiscing elit. |
| LOW | …aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go | 38 | want := `Lorem ipsum dolor sit amet, consectetur adipiscing elit. |
| LOW | …aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go | 55 | f.WriteWrapped("Lorem ipsum dolor sit amet, consectetur adipiscing elit. Morbi at turpis faucibus, gravida dolor ut, fr |
| LOW | …aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go | 55 | f.WriteWrapped("Lorem ipsum dolor sit amet, consectetur adipiscing elit. Morbi at turpis faucibus, gravida dolor ut, fr |
| LOW | …aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go | 56 | f.Indent(10).WriteWrapped("Lorem ipsum dolor sit amet, consectetur adipiscing elit. Morbi at turpis faucibus, gravida d |
| LOW | …aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go | 56 | f.Indent(10).WriteWrapped("Lorem ipsum dolor sit amet, consectetur adipiscing elit. Morbi at turpis faucibus, gravida d |
| LOW | …aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go | 58 | f.Indent(20).WriteWrapped("Lorem ipsum dolor sit amet, consectetur adipiscing elit. ThisIsAVeryLongWordThatDoesn'tFitOn |
| LOW | …aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go | 58 | f.Indent(20).WriteWrapped("Lorem ipsum dolor sit amet, consectetur adipiscing elit. ThisIsAVeryLongWordThatDoesn'tFitOn |
| LOW | …aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go | 84 | want := `Lorem ipsum dolor sit amet, consectetur adipiscing |
| LOW | …aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go | 84 | want := `Lorem ipsum dolor sit amet, consectetur adipiscing |
| LOW | …aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go | 87 | Lorem ipsum dolor sit amet, consectetur |
| LOW | …aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go | 87 | Lorem ipsum dolor sit amet, consectetur |
| LOW | …aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go | 91 | Lorem ipsum dolor sit amet, |
| LOW | …aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go | 91 | Lorem ipsum dolor sit amet, |
| LOW | …aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go | 127 | f.WriteWrapped("Lorem ipsum dolor sit amet, consectetur adipiscing elit. Morbi at turpis faucibus, gravida dolor ut, fr |
| LOW | …aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go | 127 | f.WriteWrapped("Lorem ipsum dolor sit amet, consectetur adipiscing elit. Morbi at turpis faucibus, gravida dolor ut, fr |
| LOW | …aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go | 128 | want := `Lorem ipsum dolor sit amet, consectetur adipiscing elit. Morbi at turpis faucibus, gravida dolor ut, fringilla |
| LOW | …aging/src/k8s.io/kubectl/pkg/explain/formatter_test.go | 128 | want := `Lorem ipsum dolor sit amet, consectetur adipiscing elit. Morbi at turpis faucibus, gravida dolor ut, fringilla |
| LOW | …/src/k8s.io/apimachinery/pkg/util/diff/complex_test.go | 139 | Street: "123 Main St", |
| LOW | …/src/k8s.io/apimachinery/pkg/util/diff/complex_test.go | 155 | {Type: "phone", Value: "555-1234"}, |
| LOW | …/src/k8s.io/apimachinery/pkg/util/diff/complex_test.go | 175 | Street: "123 Main St", |
| LOW | …/src/k8s.io/apimachinery/pkg/util/diff/complex_test.go | 185 | {Type: "phone", Value: "555-1234"}, |
| LOW | …/src/k8s.io/apimachinery/pkg/util/diff/complex_test.go | 186 | {Type: "fax", Value: "555-5678"}, // Additional |
| LOW | test/e2e/windows/host_process.go | 52 | if ($c -ne "Lorem ipsum dolor sit amet") { |
| LOW | test/e2e/windows/host_process.go | 52 | if ($c -ne "Lorem ipsum dolor sit amet") { |
| LOW | test/e2e/windows/host_process.go | 469 | "text": "Lorem ipsum dolor sit amet", |
| LOW | test/e2e/windows/host_process.go | 469 | "text": "Lorem ipsum dolor sit amet", |
| LOW | pkg/kubelet/cm/cpumanager/policy_static_test.go | 2031 | "badvalue2": "lorem ipsum", |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | cluster/gce/util.sh | 4106 | # ----------------------------------------------------------------------------- |
| MEDIUM | hack/lib/golang.sh | 141 | # ------------ |
| MEDIUM | hack/lib/golang.sh | 150 | # ------------ |
| MEDIUM | hack/lib/version.sh | 17 | # ----------------------------------------------------------------------------- |
| MEDIUM | pkg/kubelet/podcertificate/podcertificatemanager.go | 146 | // ┌─────────────────┐ |
| MEDIUM | pkg/kubelet/podcertificate/podcertificatemanager.go | 148 | // fresh ────► wait ────► fresh ──────► waitrefresh |
| MEDIUM | pkg/kubelet/podcertificate/podcertificatemanager.go | 150 | // ├──────► denied ◄───────────┤ |
| MEDIUM | pkg/kubelet/podcertificate/podcertificatemanager.go | 152 | // └──────► failed ◄───────────┘ |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | hack/golangci.yaml | 0 | path: "staging/src/k8s.io/api/authentication/v1/types.go" - text: 'notimestamp: naming convention "notimestamp": field ( |
| HIGH | hack/golangci-hints.yaml | 0 | path: "staging/src/k8s.io/api/authentication/v1/types.go" - text: 'notimestamp: naming convention "notimestamp": field ( |
| HIGH | hack/kube-api-linter/exceptions.yaml | 0 | path: "staging/src/k8s.io/api/authentication/v1/types.go" - text: 'notimestamp: naming convention "notimestamp": field ( |
| HIGH | hack/golangci.yaml | 0 | path: "staging/src/k8s.io/api/events/(v1|v1beta1)/types.go" - text: 'notimestamp: naming convention "notimestamp": field |
| HIGH | hack/golangci-hints.yaml | 0 | path: "staging/src/k8s.io/api/events/(v1|v1beta1)/types.go" - text: 'notimestamp: naming convention "notimestamp": field |
| HIGH | hack/kube-api-linter/exceptions.yaml | 0 | path: "staging/src/k8s.io/api/events/(v1|v1beta1)/types.go" - text: 'notimestamp: naming convention "notimestamp": field |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | cluster/get-kube.sh | 18 | # Usage: |
| LOW | …rc/k8s.io/apiserver/pkg/util/compatibility/registry.go | 26 | // Example usage: |
| LOW | staging/src/k8s.io/component-base/tracing/utils.go | 114 | // Example usage: |
| LOW | test/utils/harness/harness.go | 29 | // Example usage: |
| LOW | hack/update-vendor-licenses.sh | 19 | # Usage: |
| LOW | hack/_update-generated-protobuf-dockerized.sh | 18 | # Usage: |
| LOW | hack/dev-push-conformance.sh | 19 | # Example usage: |
| LOW | hack/lib/util.sh | 788 | # Example usage: |
| LOW | third_party/forked/shell2junit/sh2ju.sh | 12 | ### Usage: |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | cluster/common.sh | 34 | # make sure to remove these vars when not used anymore |
| LOW | cluster/common.sh | 43 | # make sure to remove these vars when not used anymore |
| MEDIUM | test/e2e_node/cpu_manager_test.go | 94 | * Context # you can add more context, but please try hard to avoid nesting them |
| LOW | hack/update-vendor.sh | 346 | kube::log::status "NOTE: don't forget to handle vendor/* and LICENSE/* files that were added or removed" >&11 |
| MEDIUM | hack/verify-prometheus-imports.sh | 86 | # somewhere else that actually isn't an import, you can use backticks / a raw |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …/images/node-perf/pytorch-wide-deep/train_wide_deep.py | 109 | |
| LOW | hack/verify-flags-underscore.py | 27 | |
| LOW | hack/boilerplate/boilerplate.py | 158 |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | CHANGELOG/CHANGELOG-1.9.md | 1691 | * A new priority function ResourceLimitsPriorityMap (disabled by default and behind alpha feature gate and not part of |
| LOW | hack/verify-flags-underscore.py | 71 | def check_underscore_in_flags(rootdir, files): |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | cluster/gce/gci/configure-helper.sh | 1880 | except Exception as e: |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …/images/node-perf/pytorch-wide-deep/train_wide_deep.py | 134 | def process_data(train_data, test_data): |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | hack/boilerplate/boilerplate.py | 18 |