Storage Orchestration for Kubernetes
This report presents the forensic synthetic code analysis of rook/rook, a Go project with 13,568 GitHub stars. SynthScan v2.0 examined 317,847 lines of code across 1185 source files, recording 546 pattern matches distributed across 19 syntactic categories. The overall adjusted score of 3.2 places this repository in the Likely human-written band.
The scanner applied 160+ deterministic lexical heuristics, multi-line block detectors, abstract syntax tree depth profilers, and a cross-file Jaccard similarity matrix to construct a statistically normalised synthetic code estimate. All matches are individually weighted by severity coefficient and contextual multiplier before summation, and the resulting headline score is temporally discounted to account for the repository's development history relative to the commercial emergence of large language model coding tooling (November 2022 onward).
This chart maps the temporal evolution of the adjusted synthetic code score across successive scan runs. An upward trajectory indicates ongoing incorporation of AI-generated code or expanding LLM-assisted scaffolding; a stable or declining trajectory may reflect active human refactoring, code removal, or the adoption of stricter authorship policies. The dashed secondary line (right axis) independently tracks total raw pattern hit count, which can diverge from the normalised score when codebase size changes significantly between scans.
Classifies detected patterns by their diagnostic confidence and structural impact. CRITICAL patterns (coefficient 10) represent definitive synthetic signatures — hallucinated imports, explicit LLM attribution metadata — virtually never produced by human authors. HIGH (5) indicates strong structural tells such as cross-file repetition or cross-linguistic idioms. MEDIUM (2) covers recognisable conversational padding and AI-specific vocabulary. LOW (1) captures subtle indicators like tautological comments and generic boilerplate that require density to carry independent signal.
This horizontal bar chart decomposes the repository's raw synthetic code score by top-level directory, allowing you to pinpoint precisely which modules or components carry the highest AI authorship density. Directories with disproportionately high scores relative to their size warrant targeted manual review: concentrated AI signatures often trace back to mass-generated configuration layers, auto-ported test suites, LLM-scaffolded boilerplate classes, or entire subsystems authored under heavy copilot assistance. Use this view to prioritise your human code-review effort.
The scanner identified 546 distinct pattern matches across 19 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a statistically significant AI authorship indicator. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the diagnostic confidence level (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — comment-context matches receive a ×1.5 weight because LLMs systematically over-annotate. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier as dense clusters constitute far stronger evidence of synthetic authorship than isolated hits.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| CRITICAL | pkg/operator/ceph/cluster/cleanup.go | 122 | {Name: sanitizeMethod, Value: cluster.Spec.CleanupPolicy.SanitizeDisks.Method.String()}, | CODE |
| CRITICAL | pkg/operator/ceph/cluster/cleanup.go | 123 | {Name: sanitizeDataSource, Value: cluster.Spec.CleanupPolicy.SanitizeDisks.DataSource.String()}, | CODE |
| CRITICAL | pkg/operator/ceph/cluster/nodedaemon/exporter.go | 270 | duration := cephCluster.Spec.Monitoring.Interval.Duration.String() | CODE |
| CRITICAL | pkg/operator/ceph/cluster/mgr/mgr.go | 446 | interval := c.spec.Monitoring.Interval.Duration.Seconds() | CODE |
| CRITICAL | pkg/operator/ceph/cluster/mgr/mgr.go | 556 | duration := c.spec.Monitoring.Interval.Duration.String() | CODE |
| CRITICAL⚡ | pkg/operator/ceph/file/mds/config.go | 84 | if !c.fs.Spec.MetadataServer.Resources.Limits.Memory().IsZero() { | CODE |
| CRITICAL⚡ | pkg/operator/ceph/file/mds/config.go | 90 | mdsCacheMemoryLimit := float64(c.fs.Spec.MetadataServer.Resources.Limits.Memory().Value()) * limitFactor | CODE |
| CRITICAL⚡ | pkg/operator/ceph/file/mds/config.go | 92 | } else if !c.fs.Spec.MetadataServer.Resources.Requests.Memory().IsZero() { | CODE |
| CRITICAL⚡ | pkg/operator/ceph/file/mds/config.go | 98 | mdsCacheMemoryRequest := float64(c.fs.Spec.MetadataServer.Resources.Requests.Memory().Value()) * requestFactor | CODE |
| CRITICAL⚡ | pkg/operator/ceph/file/mds/spec.go | 83 | c.fs.Spec.MetadataServer.Annotations.ApplyToObjectMeta(&podSpec.ObjectMeta) | CODE |
| CRITICAL⚡ | pkg/operator/ceph/file/mds/spec.go | 84 | c.fs.Spec.MetadataServer.Labels.ApplyToObjectMeta(&podSpec.ObjectMeta) | CODE |
| CRITICAL⚡ | pkg/operator/ceph/file/mds/spec.go | 85 | c.fs.Spec.MetadataServer.Placement.ApplyToPodSpec(&podSpec.Spec) | CODE |
| CRITICAL | pkg/operator/ceph/file/mds/spec.go | 116 | c.fs.Spec.MetadataServer.Annotations.ApplyToObjectMeta(&d.ObjectMeta) | CODE |
| CRITICAL | pkg/operator/ceph/file/mds/spec.go | 117 | c.fs.Spec.MetadataServer.Labels.ApplyToObjectMeta(&d.ObjectMeta) | CODE |
| CRITICAL | pkg/operator/ceph/object/spec.go | 178 | c.store.Spec.Gateway.Annotations.ApplyToObjectMeta(&d.ObjectMeta) | CODE |
| CRITICAL | pkg/operator/ceph/object/spec.go | 179 | c.store.Spec.Gateway.Labels.ApplyToObjectMeta(&d.ObjectMeta) | CODE |
| CRITICAL | pkg/operator/ceph/object/spec.go | 289 | kmsNeedsToken := kmsEnabled && c.store.Spec.Security.KeyManagementService.IsTokenAuthEnabled() | CODE |
| CRITICAL | pkg/operator/ceph/object/spec.go | 290 | s3NeedsToken := s3Enabled && c.store.Spec.Security.ServerSideEncryptionS3.IsTokenAuthEnabled() | CODE |
| CRITICAL | pkg/operator/ceph/object/spec.go | 309 | c.store.Spec.Gateway.Placement.ApplyToPodSpec(&podSpec) | CODE |
| CRITICAL⚡ | pkg/operator/ceph/object/spec.go | 322 | c.store.Spec.Gateway.Annotations.ApplyToObjectMeta(&podTemplateSpec.ObjectMeta) | CODE |
| CRITICAL⚡ | pkg/operator/ceph/object/spec.go | 323 | c.store.Spec.Gateway.Labels.ApplyToObjectMeta(&podTemplateSpec.ObjectMeta) | CODE |
| CRITICAL⚡ | pkg/operator/ceph/object/spec.go | 333 | addVols, addMounts := c.store.Spec.Gateway.AdditionalVolumeMounts.GenerateVolumesAndMounts("/var/rgw/") | CODE |
| CRITICAL | pkg/operator/ceph/object/spec.go | 494 | if c.store.Spec.Security.KeyManagementService.IsTokenAuthEnabled() { | CODE |
| CRITICAL | pkg/operator/ceph/object/spec.go | 497 | if c.store.Spec.Security.KeyManagementService.IsTLSEnabled() { | CODE |
| CRITICAL⚡ | pkg/operator/ceph/object/spec.go | 538 | if c.store.Spec.Security.ServerSideEncryptionS3.IsAgentAuthEnabled() { | CODE |
| CRITICAL⚡ | pkg/operator/ceph/object/spec.go | 540 | } else if c.store.Spec.Security.ServerSideEncryptionS3.IsTokenAuthEnabled() { | CODE |
| CRITICAL⚡ | pkg/operator/ceph/object/spec.go | 543 | if c.store.Spec.Security.ServerSideEncryptionS3.IsTLSEnabled() { | CODE |
| CRITICAL | pkg/operator/ceph/object/spec.go | 757 | c.store.Spec.Gateway.Service.Annotations.ApplyToObjectMeta(&svc.ObjectMeta) | CODE |
| CRITICAL | pkg/operator/ceph/object/spec.go | 758 | c.store.Spec.Gateway.Service.Labels.ApplyToObjectMeta(&svc.ObjectMeta) | CODE |
| CRITICAL | pkg/operator/ceph/object/spec.go | 878 | if c.store.Spec.Security != nil && c.store.Spec.Security.KeyManagementService.IsEnabled() { | CODE |
| CRITICAL | pkg/operator/ceph/object/spec.go | 911 | if c.store.Spec.Security != nil && c.store.Spec.Security.ServerSideEncryptionS3.IsEnabled() { | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | design/ceph/ceph-nfs-ganesha.md | 101 | # - matchExpressions: | COMMENT |
| LOW | design/ceph/update-osds-in-parallel.md | 141 | # continueUpgradeAfterChecksEvenIfNotHealthy is merely relocated from spec | COMMENT |
| LOW | design/ceph/object/store.md | 321 | dataPoolName: rgw-data-pool # results to rgw-data-pool:<CephObjectStore.name>.data | COMMENT |
| LOW | …n/CRDs/Shared-Filesystem/ceph-fs-subvolumegroup-crd.md | 21 | namespace: rook-ceph # namespace:cluster | COMMENT |
| LOW | …entation/CRDs/Shared-Filesystem/ceph-filesystem-crd.md | 41 | placement: | COMMENT |
| LOW | …mentation/CRDs/Object-Storage/ceph-object-store-crd.md | 41 | port: 80 | COMMENT |
| LOW | …mentation/CRDs/Object-Storage/ceph-object-store-crd.md | 61 | # topologySpreadConstraints: | COMMENT |
| LOW | …orage-Configuration/Block-Storage-RBD/block-storage.md | 41 | clusterID: rook-ceph | COMMENT |
| LOW | …orage-Configuration/Block-Storage-RBD/block-storage.md | 61 | COMMENT | |
| LOW | …Object-Storage-RGW/ceph-object-bucket-notifications.md | 61 | # ackLevel: broker [13] | COMMENT |
| LOW | images/ceph/toolbox.sh | 1 | #!/usr/bin/env -S bash -e | COMMENT |
| LOW | deploy/charts/rook-ceph/values.yaml | 1 | # Default values for rook-ceph-operator | COMMENT |
| LOW | deploy/charts/rook-ceph/values.yaml | 161 | # -- If true, scale down the rook operator. | COMMENT |
| LOW | deploy/charts/rook-ceph/values.yaml | 181 | # operator: Exists | COMMENT |
| LOW | deploy/charts/rook-ceph/values.yaml | 221 | # - name: my-registry-secret | COMMENT |
| LOW | deploy/charts/library/Chart.yaml | 1 | --- | COMMENT |
| LOW | deploy/charts/library/Chart.yaml | 21 | # the 'charts/' dir of dependent charts via a symlink does not require using | COMMENT |
| LOW | deploy/charts/rook-ceph-cluster/values.yaml | 1 | # Default values for a single rook-ceph cluster | COMMENT |
| LOW | deploy/charts/rook-ceph-cluster/values.yaml | 61 | prometheusRuleOverrides: {} | COMMENT |
| LOW | deploy/charts/rook-ceph-cluster/values.yaml | 81 | # -- Annotations applied to PrometheusRule | COMMENT |
| LOW | deploy/charts/rook-ceph-cluster/values.yaml | 101 | tag: v20.2.2 | COMMENT |
| LOW | deploy/charts/rook-ceph-cluster/values.yaml | 121 | # Important: if you reinstall the cluster, make sure you delete this directory from each host or else the mons will fa | COMMENT |
| LOW | deploy/charts/rook-ceph-cluster/values.yaml | 161 | # List of modules to optionally enable or disable. | COMMENT |
| LOW | deploy/charts/rook-ceph-cluster/values.yaml | 181 | # The default is false. When encryption is enabled, all communication between clients and Ceph daemons, or between | COMMENT |
| LOW | deploy/charts/rook-ceph-cluster/values.yaml | 201 | # # The selector keys are required to be `public` and `cluster`. | COMMENT |
| LOW | deploy/charts/rook-ceph-cluster/values.yaml | 221 | COMMENT | |
| LOW | deploy/charts/rook-ceph-cluster/values.yaml | 241 | method: quick | COMMENT |
| LOW | deploy/charts/rook-ceph-cluster/values.yaml | 261 | # - matchExpressions: | COMMENT |
| LOW | deploy/charts/rook-ceph-cluster/values.yaml | 281 | COMMENT | |
| LOW | deploy/charts/rook-ceph-cluster/values.yaml | 381 | storage: # cluster level storage configuration and selection | COMMENT |
| LOW | deploy/charts/rook-ceph-cluster/values.yaml | 401 | # config: # configuration can be specified at the node level which overrides the cluster level config | COMMENT |
| LOW | deploy/charts/rook-ceph-cluster/values.yaml | 441 | # external-dns/private: "true" | COMMENT |
| LOW | deploy/charts/rook-ceph-cluster/values.yaml | 461 | route: | COMMENT |
| LOW | deploy/charts/rook-ceph-cluster/values.yaml | 501 | allowedTopologies: [] | COMMENT |
| LOW | deploy/charts/rook-ceph-cluster/values.yaml | 681 | # port: 80 | COMMENT |
| LOW | deploy/charts/rook-ceph-cluster/values.yaml | 701 | # path: / | COMMENT |
| LOW | deploy/charts/rook-ceph-cluster/values.yaml | 721 | # realm: realm-a | COMMENT |
| LOW | deploy/charts/rook-ceph-cluster/values.yaml | 741 | # # - "http://rgw-a.fqdn" | COMMENT |
| LOW | deploy/charts/rook-ceph-cluster/values.yaml | 761 | # # clusterID is the namespace where the rook cluster is running | COMMENT |
| LOW | deploy/charts/rook-ceph-cluster/values.yaml | 781 | # # RBD image features, equivalent to OR'd bitfield value: 63 | COMMENT |
| LOW | deploy/examples/bucket-topic.yaml | 21 | # ackLevel: broker # none, broker(default), routable | COMMENT |
| LOW | deploy/examples/common-external.yaml | 1 | ################################################################################################################### | COMMENT |
| LOW | deploy/examples/rbdmirror.yaml | 1 | ################################################################################################################# | COMMENT |
| LOW | deploy/examples/rbdmirror.yaml | 21 | # nodeAffinity: | COMMENT |
| LOW | deploy/examples/object-a.yaml | 1 | ################################################################################################################# | COMMENT |
| LOW | deploy/examples/object-a.yaml | 41 | matchExpressions: | COMMENT |
| LOW | deploy/examples/object-a.yaml | 61 | # podAffinity: | COMMENT |
| LOW | deploy/examples/osd-purge.yaml | 1 | ################################################################################################################# | COMMENT |
| LOW | deploy/examples/pool.yaml | 21 | # hybridStorage: | COMMENT |
| LOW | deploy/examples/pool.yaml | 41 | # Set any property on a given pool | COMMENT |
| LOW | deploy/examples/pool.yaml | 61 | mirror: | COMMENT |
| LOW | deploy/examples/object-multi-instance-test.yaml | 1 | ################################################################################################################# | COMMENT |
| LOW | deploy/examples/cluster-tnf.yaml | 1 | ################################################################################################################# | COMMENT |
| LOW | deploy/examples/cluster-on-pvc.yaml | 61 | # The number of OSDs to create from this device set | COMMENT |
| LOW | deploy/examples/cluster-on-pvc.yaml | 141 | # dedicated block device to store bluestore database (block.db) | COMMENT |
| LOW | deploy/examples/cluster-on-pvc.yaml | 161 | # storage: 5Gi | COMMENT |
| LOW | deploy/examples/cluster-on-pvc.yaml | 181 | mgr: system-cluster-critical | COMMENT |
| LOW | deploy/examples/cluster-on-pvc.yaml | 201 | # VAULT_ADDR: VAULT_ADDR_CHANGE_ME # e,g: https://vault.my-domain.com:8200 | COMMENT |
| LOW | deploy/examples/object-account.yaml | 1 | ################################################################################################################# | COMMENT |
| LOW | deploy/examples/operator.yaml | 1 | ################################################################################################################# | COMMENT |
| 276 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | deploy/examples/crds.yaml | 2 | # Create the CRDs that are necessary before creating your Rook cluster. | COMMENT |
| MEDIUM | deploy/examples/pool-test.yaml | 2 | # Create a Ceph pool with settings a test environment. Only a single OSD is required. | COMMENT |
| MEDIUM | deploy/examples/object-multisite-pull-realm-test.yaml | 2 | # Create an object store with settings for a test environment. Only a single OSD is required in this example. | COMMENT |
| MEDIUM | deploy/examples/common-external.yaml | 2 | # Create the common resources that are necessary to start an external Ceph cluster in a different namespace | COMMENT |
| MEDIUM | deploy/examples/object-external.yaml | 2 | # Create an object store with settings for an external Ceph cluster. | COMMENT |
| MEDIUM | deploy/examples/object-a.yaml | 2 | # Create an object store with settings for shared pools in a production environment. A minimum of 3 hosts with | COMMENT |
| MEDIUM | deploy/examples/object-multisite-pull-realm.yaml | 2 | # Create an object store with multisite settings that is syncing with another multisite cluster for a | COMMENT |
| MEDIUM | deploy/examples/object-test.yaml | 2 | # Create an object store with settings for a test environment. Only a single OSD is required in this example. | COMMENT |
| MEDIUM | deploy/examples/object-multisite.yaml | 2 | # Create an object store with multisite settings for a production environment. A minimum of 3 hosts with OSDs | COMMENT |
| MEDIUM | deploy/examples/cluster-test.yaml | 2 | # Define the settings for the rook-ceph cluster with common settings for a small test cluster. | COMMENT |
| MEDIUM | deploy/examples/common.yaml | 2 | # Create the common resources that are necessary to start the operator and the ceph cluster. | COMMENT |
| MEDIUM | deploy/examples/object-shared-pools-test.yaml | 2 | # Create the pools that can be shared by multiple object stores. A single OSD is required | COMMENT |
| MEDIUM | deploy/examples/pool.yaml | 2 | # Create a Ceph pool with settings for replication in production environments. A minimum of 3 OSDs on | COMMENT |
| MEDIUM | deploy/examples/pool-ec.yaml | 2 | # Create a Ceph pool with settings for erasure coding. A minimum of 3 OSDs are required in this example. | COMMENT |
| MEDIUM | deploy/examples/cluster-external-management.yaml | 2 | # Define the settings for the rook-ceph-external cluster with common settings for a production cluster. | COMMENT |
| MEDIUM | deploy/examples/object-multi-instance-test.yaml | 2 | # Create an object store with settings for a test environment. Only a single OSD is required in this example. | COMMENT |
| MEDIUM | deploy/examples/object-multisite-test.yaml | 2 | # Create an object store with settings for a test environment. Only a single OSD is required in this example. | COMMENT |
| MEDIUM | deploy/examples/cluster-tnf.yaml | 2 | # Define the settings for the rook-ceph cluster with DRBD floating monitor for testing. | COMMENT |
| MEDIUM | deploy/examples/cluster-stretched-aws.yaml | 2 | # Define the settings for the rook-ceph cluster with common settings for a production cluster. | COMMENT |
| MEDIUM | deploy/examples/cluster-on-pvc.yaml | 2 | # Define the settings for the rook-ceph cluster with common settings for a production cluster on top of cloud instances. | COMMENT |
| MEDIUM | deploy/examples/object-account.yaml | 2 | # Create an object store account to manage RGW resources. | COMMENT |
| MEDIUM | deploy/examples/object.yaml | 2 | # Create an object store with settings for replication in a production environment. A minimum of 3 hosts with | COMMENT |
| MEDIUM | deploy/examples/cluster-on-local-pvc.yaml | 2 | # Define the settings for the rook-ceph cluster with common settings for a production cluster on top of bare metal. | COMMENT |
| MEDIUM | deploy/examples/filesystem-test.yaml | 2 | # Create a filesystem with settings for a test environment where only a single OSD is required. | COMMENT |
| MEDIUM | deploy/examples/cluster.yaml | 2 | # Define the settings for the rook-ceph cluster with common settings for a production cluster. | COMMENT |
| MEDIUM | deploy/examples/cluster-stretched.yaml | 2 | # Define the settings for the rook-ceph cluster with common settings for a production cluster. | COMMENT |
| MEDIUM | deploy/examples/object-shared-pools.yaml | 2 | # Create the pools that can be shared by multiple object stores. A minimum of 3 hosts with | COMMENT |
| MEDIUM | deploy/examples/filesystem-ec.yaml | 2 | # Create a filesystem with settings for erasure-coding instead of replication. A minimum of three nodes with OSDs | COMMENT |
| MEDIUM | deploy/examples/object-ec.yaml | 2 | # Create an object store with settings for erasure coding for the data pool. A minimum of 3 nodes with OSDs are | COMMENT |
| MEDIUM | deploy/examples/two-object-one-zone-test.yaml | 2 | # Create an two object stores with the same set of pre-created pools | COMMENT |
| MEDIUM | deploy/examples/filesystem.yaml | 2 | # Create a filesystem with settings with replication enabled for a production environment. | COMMENT |
| MEDIUM | deploy/examples/object-user.yaml | 2 | # Create an object store user for access to the s3 endpoint. | COMMENT |
| MEDIUM | deploy/examples/object-b.yaml | 2 | # Create an object store with settings for shared pools in a production environment. A minimum of 3 hosts with | COMMENT |
| MEDIUM | deploy/examples/pool-mirrored.yaml | 2 | # Create a mirroring enabled Ceph pool. | COMMENT |
| MEDIUM | deploy/examples/toolbox-operator-image.yaml | 2 | # Define the toolbox that will run with the Rook operator image. | COMMENT |
| MEDIUM | deploy/examples/headless-mon-service.yaml | 1 | # Create a headless service which will effectively referenced by the EndpointSlice resources | COMMENT |
| MEDIUM | deploy/examples/cluster-external.yaml | 2 | # Define the settings for the rook-ceph-external cluster with common settings for a production cluster. | COMMENT |
| MEDIUM | deploy/examples/operator-openshift.yaml | 2 | # Create the rook operator and necessary security context constraints for running | COMMENT |
| MEDIUM | deploy/examples/object-openshift.yaml | 2 | # Create an object store with settings specific for OpenShift. A minimum of 3 OSDs are required in this example | COMMENT |
| MEDIUM | deploy/examples/nfs.yaml | 2 | # Create a Ceph pool with settings for replication in production environments. A minimum of 3 OSDs on | COMMENT |
| MEDIUM | deploy/examples/cluster-multus-test.yaml | 2 | # Define the settings for the rook-ceph cluster with common settings for a small test cluster. | COMMENT |
| MEDIUM | deploy/examples/cluster-on-pvc-minikube.yaml | 2 | # Define the settings for the rook-ceph cluster with settings for a minikube cluster with a single node | COMMENT |
| MEDIUM | deploy/examples/csi/rbd/storageclass-ec.yaml | 2 | # Create a storage class with a data pool that uses erasure coding for a production environment. | COMMENT |
| MEDIUM | …loy/examples/csi/rbd/volumeattributesclass-cgroup.yaml | 2 | # Create a VolumeAttributesClass for RBD QoS using cgroup v2 io.max limits. | COMMENT |
| MEDIUM | deploy/examples/external/object-external.yaml | 2 | # Create an object store with settings for an external Ceph cluster. | COMMENT |
| MEDIUM | tests/scripts/github-action-helper.sh | 186 | # Create an extra disk if doesn't exist. | COMMENT |
| MEDIUM | tests/scripts/deploy-validate-vault.sh | 157 | # Create a token for Rook | COMMENT |
| MEDIUM | tests/manifests/test-object.yaml | 2 | # Create an object store with settings for a test environment. Only a single OSD is required in this example. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | deploy/examples/create-external-cluster-resources.py | 513 | def validate_rbd_metadata_ec_pool_name(self): | CODE |
| LOW | deploy/examples/create-external-cluster-resources.py | 563 | def validate_rgw_endpoint_tls_cert(self): | CODE |
| LOW | deploy/examples/create-external-cluster-resources.py | 705 | def get_ceph_external_mon_data(self): | CODE |
| LOW | deploy/examples/create-external-cluster-resources.py | 779 | def get_active_and_standby_mgrs(self): | CODE |
| LOW | deploy/examples/create-external-cluster-resources.py | 871 | def get_cephfs_provisioner_caps_and_entity(self, generation): | CODE |
| LOW | deploy/examples/create-external-cluster-resources.py | 896 | def get_cephfs_node_caps_and_entity(self, generation): | CODE |
| LOW | deploy/examples/create-external-cluster-resources.py | 954 | def get_rbd_provisioner_caps_and_entity(self, generation): | CODE |
| LOW | deploy/examples/create-external-cluster-resources.py | 992 | def get_rbd_node_caps_and_entity(self, generation): | CODE |
| LOW | deploy/examples/create-external-cluster-resources.py | 1104 | def get_cephfs_data_pool_details(self): | CODE |
| LOW | deploy/examples/create-external-cluster-resources.py | 1248 | def create_rgw_admin_ops_user(self): | CODE |
| LOW | deploy/examples/create-external-cluster-resources.py | 1379 | def get_or_create_subvolume_group(self, subvolume_group, cephfs_filesystem_name): | CODE |
| LOW | deploy/examples/create-external-cluster-resources.py | 1529 | def convert_comma_separated_to_array(self, value): | CODE |
| LOW | deploy/examples/create-external-cluster-resources.py | 1532 | def raise_exception_if_any_topology_flag_is_missing(self): | CODE |
| LOW | deploy/examples/create-external-cluster-resources.py | 1569 | def validate_topology_rbd_pools(self, topology_rbd_pools): | CODE |
| LOW | deploy/examples/create-external-cluster-resources.py | 1597 | def get_cephx_latest_key_generation(self): | CODE |
| LOW | deploy/examples/create-external-cluster-resources.py | 2100 | def upgrade_users_permissions(self, generation): | CODE |
| LOW | deploy/examples/create-external-cluster-resources.py | 2123 | def get_rgw_pool_name_during_upgrade(self, user, caps): | CODE |
| LOW | deploy/examples/import-external-cluster.sh | 179 | function createInputCommadConfigMap() { | CODE |
| LOW | deploy/examples/import-external-cluster.sh | 227 | function importCsiRBDProvisionerSecret() { | CODE |
| LOW | deploy/examples/import-external-cluster.sh | 249 | function importCsiCephFSNodeSecret() { | CODE |
| LOW | deploy/examples/import-external-cluster.sh | 270 | function importCsiCephFSProvisionerSecret() { | CODE |
| LOW | deploy/examples/import-external-cluster.sh | 399 | function createRBDTopologyStorageClass() { | CODE |
| LOW | …oy/examples/create-external-cluster-resources-tests.py | 84 | def test_non_zero_return_and_error(self): | CODE |
| LOW | …oy/examples/create-external-cluster-resources-tests.py | 93 | def test_multi_filesystem_scenario(self): | CODE |
| LOW | …oy/examples/create-external-cluster-resources-tests.py | 131 | def test_multi_data_pool_scenario(self): | CODE |
| LOW | …oy/examples/create-external-cluster-resources-tests.py | 168 | def test_upgrade_user_permissions(self): | CODE |
| LOW | …oy/examples/create-external-cluster-resources-tests.py | 181 | def test_monitoring_endpoint_validation(self): | CODE |
| LOW | …oy/examples/create-external-cluster-resources-tests.py | 236 | def test_skip_monitoring_endpoint_no_prometheus(self): | CODE |
| LOW | …oy/examples/create-external-cluster-resources-tests.py | 266 | def test_skip_monitoring_endpoint(self): | CODE |
| LOW | …examples/external/create-external-cluster-resources.py | 513 | def validate_rbd_metadata_ec_pool_name(self): | CODE |
| LOW | …examples/external/create-external-cluster-resources.py | 563 | def validate_rgw_endpoint_tls_cert(self): | CODE |
| LOW | …examples/external/create-external-cluster-resources.py | 705 | def get_ceph_external_mon_data(self): | CODE |
| LOW | …examples/external/create-external-cluster-resources.py | 779 | def get_active_and_standby_mgrs(self): | CODE |
| LOW | …examples/external/create-external-cluster-resources.py | 871 | def get_cephfs_provisioner_caps_and_entity(self, generation): | CODE |
| LOW | …examples/external/create-external-cluster-resources.py | 896 | def get_cephfs_node_caps_and_entity(self, generation): | CODE |
| LOW | …examples/external/create-external-cluster-resources.py | 954 | def get_rbd_provisioner_caps_and_entity(self, generation): | CODE |
| LOW | …examples/external/create-external-cluster-resources.py | 992 | def get_rbd_node_caps_and_entity(self, generation): | CODE |
| LOW | …examples/external/create-external-cluster-resources.py | 1104 | def get_cephfs_data_pool_details(self): | CODE |
| LOW | …examples/external/create-external-cluster-resources.py | 1248 | def create_rgw_admin_ops_user(self): | CODE |
| LOW | …examples/external/create-external-cluster-resources.py | 1379 | def get_or_create_subvolume_group(self, subvolume_group, cephfs_filesystem_name): | CODE |
| LOW | …examples/external/create-external-cluster-resources.py | 1529 | def convert_comma_separated_to_array(self, value): | CODE |
| LOW | …examples/external/create-external-cluster-resources.py | 1532 | def raise_exception_if_any_topology_flag_is_missing(self): | CODE |
| LOW | …examples/external/create-external-cluster-resources.py | 1569 | def validate_topology_rbd_pools(self, topology_rbd_pools): | CODE |
| LOW | …examples/external/create-external-cluster-resources.py | 1597 | def get_cephx_latest_key_generation(self): | CODE |
| LOW | …examples/external/create-external-cluster-resources.py | 2100 | def upgrade_users_permissions(self, generation): | CODE |
| LOW | …examples/external/create-external-cluster-resources.py | 2123 | def get_rgw_pool_name_during_upgrade(self, user, caps): | CODE |
| LOW | deploy/examples/external/import-external-cluster.sh | 179 | function createInputCommadConfigMap() { | CODE |
| LOW | deploy/examples/external/import-external-cluster.sh | 227 | function importCsiRBDProvisionerSecret() { | CODE |
| LOW | deploy/examples/external/import-external-cluster.sh | 249 | function importCsiCephFSNodeSecret() { | CODE |
| LOW | deploy/examples/external/import-external-cluster.sh | 270 | function importCsiCephFSProvisionerSecret() { | CODE |
| LOW | deploy/examples/external/import-external-cluster.sh | 399 | function createRBDTopologyStorageClass() { | CODE |
| LOW | …es/external/create-external-cluster-resources-tests.py | 84 | def test_non_zero_return_and_error(self): | CODE |
| LOW | …es/external/create-external-cluster-resources-tests.py | 93 | def test_multi_filesystem_scenario(self): | CODE |
| LOW | …es/external/create-external-cluster-resources-tests.py | 131 | def test_multi_data_pool_scenario(self): | CODE |
| LOW | …es/external/create-external-cluster-resources-tests.py | 168 | def test_upgrade_user_permissions(self): | CODE |
| LOW | …es/external/create-external-cluster-resources-tests.py | 181 | def test_monitoring_endpoint_validation(self): | CODE |
| LOW | …es/external/create-external-cluster-resources-tests.py | 236 | def test_skip_monitoring_endpoint_no_prometheus(self): | CODE |
| LOW | …es/external/create-external-cluster-resources-tests.py | 266 | def test_skip_monitoring_endpoint(self): | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | deploy/examples/object-a.yaml | 4 | # shared metadata and data pools. The pool sharing will utilize RADOS namespaces to keep the object store | COMMENT |
| LOW | deploy/examples/create-external-cluster-resources.py | 1162 | # just return silently | COMMENT |
| MEDIUM | deploy/examples/object-shared-pools-test.yaml | 4 | # shared metadata and data pools. The pool sharing will utilize RADOS namespaces to keep the object store | COMMENT |
| MEDIUM | deploy/examples/object-shared-pools.yaml | 4 | # shared metadata and data pools. The pool sharing will utilize RADOS namespaces to keep the object store | COMMENT |
| MEDIUM | deploy/examples/object-b.yaml | 4 | # shared metadata and data pools. The pool sharing will utilize RADOS namespaces to keep the object store | COMMENT |
| LOW | …examples/external/create-external-cluster-resources.py | 1162 | # just return silently | COMMENT |
| MEDIUM | pkg/apis/ceph.rook.io/v1/types.go | 3262 | // network attachment definitions. Rook's methods are robust but may be imprecise for | COMMENT |
| MEDIUM | pkg/daemon/ceph/osd/kms/vault_test.go | 210 | // the previous file. Essentially we are verifying that defer does what it is supposed to do. | COMMENT |
| MEDIUM | pkg/operator/ceph/cluster/predicate.go | 151 | // Definitely non-trivial but nice to have in the future | COMMENT |
| MEDIUM | pkg/operator/ceph/cluster/osd/spec.go | 1447 | // Essentially, the device cannot be found because it was not mounted in the container | COMMENT |
| MEDIUM | pkg/operator/ceph/config/datapath.go | 76 | // NewDatalessDaemonDataPathMap returns a new DataPathMap for a daemon which does not utilize a data | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | deploy/examples/create-external-cluster-resources.py | 0 | copyright 2022 the rook authors. all rights reserved. licensed under the apache license, version 2.0 (the "license"); yo | STRING |
| HIGH | …examples/external/create-external-cluster-resources.py | 0 | copyright 2022 the rook authors. all rights reserved. licensed under the apache license, version 2.0 (the "license"); yo | STRING |
| HIGH | …oy/examples/create-external-cluster-resources-tests.py | 0 | copyright 2022 the rook authors. all rights reserved. licensed under the apache license, version 2.0 (the "license"); yo | STRING |
| HIGH | …es/external/create-external-cluster-resources-tests.py | 0 | copyright 2022 the rook authors. all rights reserved. licensed under the apache license, version 2.0 (the "license"); yo | STRING |
| HIGH | tests/scripts/pythonwebserver/server.py | 0 | copyright 2022 the rook authors. all rights reserved. licensed under the apache license, version 2.0 (the "license"); yo | STRING |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | Documentation/Contributing/development-flow.md | 320 | # In this example, the last 5 commits will be opened in the git rebase tool. | COMMENT |
| HIGH | deploy/examples/cluster-stretched-aws.yaml | 129 | # settings as other mons. In this example, the arbiter has a toleration to run on a control-plane node. | COMMENT |
| HIGH | deploy/examples/cluster-stretched.yaml | 57 | # settings as other mons. In this example, the arbiter has a toleration to run on a control-plane node. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | …torage-Configuration/Advanced/two-node-cluster-drbd.md | 20 | ### Step 1: Install DRBD Kernel Modules | COMMENT |
| LOW | …torage-Configuration/Advanced/two-node-cluster-drbd.md | 46 | ### Step 2: Identify Block Devices | COMMENT |
| LOW | …torage-Configuration/Advanced/two-node-cluster-drbd.md | 81 | ### Step 3: Run DRBD Setup Script | COMMENT |
| LOW | …torage-Configuration/Advanced/two-node-cluster-drbd.md | 104 | ### Step 4: Verify DRBD Setup | COMMENT |
| LOW | …torage-Configuration/Advanced/two-node-cluster-drbd.md | 119 | ### Step 5: Deploy Rook CephCluster | COMMENT |
| LOW | …torage-Configuration/Advanced/two-node-cluster-drbd.md | 129 | ### Step 6: Verify Ceph Cluster | COMMENT |
| LOW | …ion/Storage-Configuration/Block-Storage-RBD/nvme-of.md | 31 | ## Step 1: Create a Ceph Block Pool | COMMENT |
| LOW | …ion/Storage-Configuration/Block-Storage-RBD/nvme-of.md | 53 | ## Step 2: Create the NVMe-oF Gateway | COMMENT |
| LOW | …ion/Storage-Configuration/Block-Storage-RBD/nvme-of.md | 99 | ## Step 3: Deploy the NVMe-oF CSI Driver via CSI Operator | COMMENT |
| LOW | …ion/Storage-Configuration/Block-Storage-RBD/nvme-of.md | 123 | ## Step 4: Create the StorageClass | COMMENT |
| LOW | …ion/Storage-Configuration/Block-Storage-RBD/nvme-of.md | 170 | ## Step 5: Create a PersistentVolumeClaim | COMMENT |
| LOW | …ion/Storage-Configuration/Block-Storage-RBD/nvme-of.md | 211 | ## Step 6: Create a Pod | COMMENT |
| LOW | …ion/Storage-Configuration/Block-Storage-RBD/nvme-of.md | 232 | ## Step 7: Accessing Volumes via NVMe-oF | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | deploy/examples/create-external-cluster-resources.py | 43 | print(f"Error: {noModErr}\nExiting the script...") | CODE |
| MEDIUM | deploy/examples/create-external-cluster-resources.py | 49 | print(f"Error: {noModErr}\nExiting the script...") | CODE |
| MEDIUM | deploy/examples/create-external-cluster-resources.py | 2233 | print(f"Error while trying to output the data: {osErr}") | CODE |
| LOW | deploy/examples/create-external-cluster-resources.py | 626 | except Exception as err: | CODE |
| MEDIUM | …examples/external/create-external-cluster-resources.py | 43 | print(f"Error: {noModErr}\nExiting the script...") | CODE |
| MEDIUM | …examples/external/create-external-cluster-resources.py | 49 | print(f"Error: {noModErr}\nExiting the script...") | CODE |
| MEDIUM | …examples/external/create-external-cluster-resources.py | 2233 | print(f"Error while trying to output the data: {osErr}") | CODE |
| LOW | …examples/external/create-external-cluster-resources.py | 626 | except Exception as err: | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | deploy/charts/rook-ceph-cluster/values.yaml | 121 | # Important: if you reinstall the cluster, make sure you delete this directory from each host or else the mons will fa | COMMENT |
| LOW | deploy/examples/cluster-on-pvc.yaml | 196 | # To enable the KMS configuration properly don't forget to uncomment the Secret at the end of the file | COMMENT |
| LOW | deploy/examples/cluster-on-pvc.yaml | 196 | # To enable the KMS configuration properly don't forget to uncomment the Secret at the end of the file | COMMENT |
| LOW | deploy/examples/object.yaml | 146 | # To enable the Server Side Encryption configuration properly don't forget to uncomment the Secret at the end of the f | COMMENT |
| LOW | deploy/examples/object.yaml | 146 | # To enable the Server Side Encryption configuration properly don't forget to uncomment the Secret at the end of the f | COMMENT |
| LOW | deploy/examples/cluster.yaml | 30 | # Important: if you reinstall the cluster, make sure you delete this directory from each host or else the mons will fa | COMMENT |
| LOW | deploy/examples/object-openshift.yaml | 109 | # To enable the KMS configuration properly don't forget to uncomment the Secret at the end of the file | COMMENT |
| LOW | deploy/examples/object-openshift.yaml | 109 | # To enable the KMS configuration properly don't forget to uncomment the Secret at the end of the file | COMMENT |
| LOW | pkg/util/sys/device.go | 376 | // (don't forget to remove surrounding quotes from the value) | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | pkg/operator/ceph/cluster/osd/osd.go | 189 | // Fall back to use the same placement as requested for the osd daemons | COMMENT |
| HIGH | pkg/operator/ceph/client/controller.go | 486 | return client.Spec.SecretName // return the secret name as requested by user. | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | deploy/charts/rook-ceph/values.yaml | 210 | # -- Disable automatic orchestration when new devices are discovered. | COMMENT |
| MEDIUM | deploy/examples/operator.yaml | 75 | # Disable automatic orchestration when new devices are discovered | COMMENT |
| MEDIUM | deploy/examples/operator-openshift.yaml | 158 | # Disable automatic orchestration when new devices are discovered | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | deploy/examples/operator.yaml | 231 | # Set this to true if SELinux is enabled (e.g. OpenShift) to workaround the anyuid issues. | COMMENT |
| LOW | deploy/examples/operator.yaml | 236 | # Set this to true if mon pods are CrashLooping on SELinux-enabled systems despite other settings. | COMMENT |
| LOW | deploy/examples/operator-openshift.yaml | 301 | # Set this to true if SELinux is enabled (e.g. OpenShift) to workaround the anyuid issues. | COMMENT |
| LOW | tests/scripts/deploy-validate-vault.sh | 233 | # Set SA_CA_CRT to the PEM encoded CA cert used to talk to Kubernetes API | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | cmd/rook/ceph/osd.go | 411 | // For backward compatibility we need to check if the env var is still set | COMMENT |
| LOW | pkg/operator/ceph/cluster/osd/spec.go | 182 | # keep OSD pods from crashing repeatedly after a reboot, we need to check if the | COMMENT |
| LOW | pkg/operator/ceph/cluster/mon/health.go | 139 | // Since c.ClusterInfo.IsInitialized() below uses a different context, we need to check if the context is done | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | deploy/examples/create-external-cluster-resources.py | 592 | CODE | |
| LOW | deploy/examples/create-external-cluster-resources.py | 1104 | CODE | |
| LOW | deploy/examples/create-external-cluster-resources.py | 1597 | CODE | |
| LOW | deploy/examples/create-external-cluster-resources.py | 1643 | CODE | |
| LOW | …examples/external/create-external-cluster-resources.py | 592 | CODE | |
| LOW | …examples/external/create-external-cluster-resources.py | 1104 | CODE | |
| LOW | …examples/external/create-external-cluster-resources.py | 1597 | CODE | |
| LOW | …examples/external/create-external-cluster-resources.py | 1643 | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | deploy/examples/cleanup-job.yaml | 9 | # --------------- | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | tests/scripts/tmate-pod.yaml | 3 | # Usage: | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | pkg/operator/ceph/controller/mirror_peer_test.go | 76 | // TODO: Add test cases. | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | pkg/operator/ceph/object/config_test.go | 280 | fakeUser := generateCephXUser("rook-ceph-rgw-fake-store-fake-user") | CODE |