Comments (9)
Hi @Snehil03,
just to confirm - did you run it on kube-system
namespace? (Or other namespace Tiller was installed in?) Helm v2 puts these Secrets/ConfigMaps into central namespace (as opposed to v3, which uses same namespace where the releases are deployed).
Because we see resources found by the v2, I'm confident these are there, somewhere.... :). Actually better command is to run both against all namespaces:
$ kubectl get configmaps --all-namespaces -l OWNER=TILLER
and
$ kubectl get secrets --all-namespaces -l OWNER=TILLER
from kube-no-trouble.
Hi Snehil,
thanks for reporting this. Are you using Helm2/3? And is this possibly a deployment that previously existed and was deleted?
Also, would you be able to share the full output of the kubent
run?
from kube-no-trouble.
Hello @stepanstipl
I am using helm3
below is the output where the issue is where branding , infra and cloud-infra does not exist still it shows as part of kubent report
kubent
5:09PM INF >>> Kube No Trouble `kubent` <<<
5:09PM INF version 0.4.0 (git sha 3d82a3f0714c97035c27374854703256b3d69125)
5:09PM INF Initializing collectors and retrieving data
5:09PM INF Retrieved 10 resources from collector name=Cluster
5:09PM INF Retrieved 74 resources from collector name="Helm v2"
5:09PM INF Retrieved 277 resources from collector name="Helm v3"
5:09PM INF Loaded ruleset name=custom.rego.tmpl
5:09PM INF Loaded ruleset name=deprecated-1-16.rego
5:09PM INF Loaded ruleset name=deprecated-1-22.rego
__________________________________________________________________________________________
>>> Deprecated APIs removed in 1.16 <<<
------------------------------------------------------------------------------------------
KIND NAMESPACE NAME API_VERSION REPLACE_WITH (SINCE)
DaemonSet monitoring cloudwatch-fluentd-cloudwatch extensions/v1beta1 apps/v1 (1.9+)
Deployment branding branding extensions/v1beta1 apps/v1 (1.9+)
Deployment infra infra-chartmuseum extensions/v1beta1 apps/v1 (1.9+)
Deployment auth login-oauth2-proxy apps/v1beta2 apps/v1 (1.9+)
Deployment cloud-infra cloud-infra-chartmuseum extensions/v1beta1 apps/v1 (1.9+)
PodSecurityPolicy monitoring cloudwatch-fluentd-cloudwatch extensions/v1beta1 policy/v1beta1 (1.10+)
from kube-no-trouble.
Hi @Snehil03, thanks for further details. It looks like some resources are being picked up by the Helm v2 connector:
5:09PM INF Retrieved 74 resources from collector name="Helm v2"
So I'm assuming you were using Helm 2 before, and the issue might be that some of the manifests were left after it was removed/migrated to Helm v3.
Could you please check for this? By default, Tiller from Helm 2 is deployed in kube-system
namespace and uses ConfigMaps
. So unless you have changed it, can you run and share the output of the following:
kubectl get configmap -n kube-system -l "OWNER=TILLER"
from kube-no-trouble.
from kube-no-trouble.
Maybe you configured Tiller to use Secrets backend? Can you try with Secrets:
kubectl get secret -l OWNER=TILLER
from kube-no-trouble.
from kube-no-trouble.
from kube-no-trouble.
OK, thanks for confirming, I'm glad we've figured this out. So this looks like the V2 Helm has not been quite removed, I would suggest cleaning up. More about that in official docs Migrating Helm v2 to v3, and you should be able to use the cleanup
command of the Helm 2to3 Plugin.
I hope that helps. As this is not a kubent issue, I'm going to close this.
from kube-no-trouble.
Related Issues (20)
- Entries appear that are not in config HOT 5
- Multiple additional kinds of the same resource are not respected HOT 2
- Failure to retrieve AKS cluster resources - kubelogin not found HOT 1
- PodSecurityPolicy Deprecation Not Detected HOT 4
- Skip already removed APIs HOT 2
- Add FAQ explaining potential false positives HOT 7
- Depreciation api call triggered in the kubernetes migration notification window HOT 2
- New release HOT 3
- Missing kubectl.kubernetes.io/last-applied-configuration Annotation in Kubernetes Resources and Inclusion in kubectl Reports HOT 2
- WRN failed to discover supported resources for policy/v1beta1 HOT 3
- Feature request - validate helm charts HOT 2
- kubeconfig context feature does not work in 0.7.1 version HOT 1
- Autofix using a --fix or --autofix flag HOT 2
- Distinguish between deprecated / removed apis in CI mode error code HOT 2
- Kubent cause AWS EKS upgrade warning HOT 4
- Helm charts scanning for deprecated APIs HOT 2
- Missing kubernetes 1.28 deprecations HOT 3
- Unable to give multiple manifest files for scanning HOT 3
- [BUG] Kubent reports updated manifests as outdated if their last applied configuration is outdated
- kubent 0.7.2 still calling deprecated podsecuritypolicies API
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from kube-no-trouble.