v0.7.0

Features

#111 allow for ignoring memory limits (@sstarcher)
#110 ignore probes on CronJobs and enhance pod checks to be aware of the root type that created them (@sstarcher)
#105 security: alert if security context is not set (@zegl)
#121 cmd: add version sub-command (@zegl)
#117 cmd: remove backwards compatible scoring, improved error handling (@zegl)

Documentation

fa92d5c doc: improved README
359fbdc doc: update kube-score usage in the README
61ec7fe github: update contributing guidelines
0ef1e68 goreleaser: update archive configuration
0229c26 readme: minor wording changes

Testing

4a63458 apps: increased test coverage of anti affinity checks
190453a ci: configure test coverage reports with CodeCov
41e7724 ci: disable codecov PR comments
bfb2244 ci: setup bors for merging PRs
666aa67 ci: use Go 1.12
dc86c0f ingress: add tests
060e834 security: move and modify old tests

Other

c676ea7 mod: update all dependencies
1d0f679 score: propagate errors instead of panicing

Download

• Download the binaries from the GitHub release page
• Download the image from Docker Hub: zegl/kube-score:0.7.0
• NEW: Download from homebrew: brew install kube-score/tap/kube-score

v0.6.0

Features

fbb6fe9 score: per object test ignores with the kube-score/ignore annotation
faa7074 parser: add support for List
20186ad parser: forward namespace names to pod template specs (Thanks @filintod!)

Documentation

74942ad container: clarify why the imagePullPolicy should be set to Always
742a4a9 doc: updated list of test highlights
44ac966 docs: capotalize Go
6a7b798 docs: simplify installation instructions
6b90ea0 readme: add section on ignoring tests
be4acf5 readme: update container-image-pull-policy

Internal changes

ed77d6e domain: move to a sub-package, so that the root package can be used by the public API
c589d82 parser: refactor decodeItem
e6660d7 scorecard: constants should be of type Grade
bb896f3 scorecard: simplify representation of Scorecard
bca4a0b scorecard: simplify the relationship with the object meta and the checks

Download

Download the binaries from the GitHub release page, or download the image from Docker Hub (zegl/kube-score:0.6.0).

v0.5.0

Features

• The kube-score cli now has two sub-commands, "score" and "list". If no sub command is specified, kube-score will default to the score command.
• kube-score list: Prints a list of all commands, this is mostly used to generate documentation.

New tests

• StatefulSet/Deployment has host PodAntiAffinity: Recommend to prevent different replicas from running on the same host #78

Changes to tests

• StatefulSet/Deployment has PodDisruptionBudget: Skip check if replicas is explicitly set < 2
• Container Image Pull Policy: Will always print a descriptive message if the check fails

Download

Download the binaries from the GitHub release page, or download the image from Docker Hub (zegl/kube-score:0.5.0).

v0.4.0

Changelog

cfdb5d9 Bump gopkg.in/yaml.v2 from 2.2.1 to 2.2.2
7a7d74b Update issue templates
fd864d9 cmd: remove docker build from goreleaser
fdcdfd4 cronjob: add a check for having startingDeadlineSeconds set
39aa6cc docker: fix the release dockerfile
f481a87 mod: update kubernetes dependencies
b401e23 service: advice against use of nodeport services

v0.3.0

Features

• Automatic release to Docker Hub
• New flag --ignore-test to disable a single test
• New flag --output-format that can toggle human- and CI friendly output
• New flags --threshold-ok and --threshold-warning

New tests

• StatefulSet has PodDisruptionBudget
• Deployment has PodDisruptionBudget
• Ingress targets Service

Fixes

• Ignore services of type ExternalName in the "Service targets Pod" test
• Handle containers without a explicit imagePullPolicy set in the "Container Image Pull Policy" test
• Handle documents with --- that isn't a document seperator

Download

Download the binaries from the GitHub release page, or download the image from Docker Hub (zegl/kube-score:0.3.0).

Note: The Docker image tagged as 0.3.0 has been tagged from fd864d9, containing an additional fix to the Docker image.

v0.2.0

Changelog

Features

New test: Service Targets Pod
Pod Probes: Is now taking namespaces in to account
Container Resources: Added --ignore-container-cpu-limit flag to disable the check for CPU limits

Bugfixes

Image Pull Policy: Now correctly handles images with "latest" or no tag set
Image Pull Policy: Fixed typo in the test description, the policy "Always" is now correctly recommended

v0.1.1

Changelog

4ff02f1 Add docs for installation
840d84c cmd: add --v flag to enable verbose output
689a575 cmd: add missing whitespace in output
a21f972 cmd: improve error message when no files where given as input
b1473f0 doc(readme)
b806d19 git: updated gitignore to not accidentaly ignore folders
709815a readme: add CI and configuration documentation
c5382f2 readme: update example image
3841706 release: build dockerfile
fa7c5b0 score: add descriptions to all tests
8697c23 score: get apiversion and kind from API in type switch
a7590aa score: update tests to use configuration struct

v0.1.0

Changelog

d99c77b all: setup initial project and a first test for pods and deployments
dd3496b cmd: exit with code 1 if a critical issue was found
175a376 doc(README) add initial readme
a1ca828 doc(license) add MIT license
6f6139d doc(readme) updated features list and add image
958022f fea(ci) add Circle CI
70c9363 fea(cmd) take multiple files as input and analyze them together
d8b04ae fea(git) add gitignore
cf0378c fea(networkpolicy) test that pods have a matching networkpolicy
d9c6cfa fea(output) prettier output from CLI tool, grouping by object
09ba3db fea(release) add goreleaser configuration
a566b62 fea(release) move gorelease to the binary path
469f8a7 fea(score) add daemonset, jobs, cronjobs, and more statefulset types
21d3e31 fea(score) add older version of statefulsets
afcac87 fea(score) add test for outdatad versions of deployments
bc3e749 fea(score) image tag scoring
f56e024 fea(score) imagePullPolicy
2b56a10 fea(score) pod probes checks
9ccee7d fea(score) statefulset parsing
44b52ca fea(securityContext) add checks for the containers securityContext
9892b79 mod: updated dependencies
a008834 ref(score) make the deployment scoring more generic for all different versions of deployments
194cae1 ref(score) seperate container tests to own file
55591d9 score: add container name as the path, improved comment rendering
7518b60 score: add descriptions to all comments
fecb240 score: don't warn for missing readinessProbes if the pod is not targeted by a service
459943d score: rename 'Unstable version' to 'Stable version'
f1a5a6d tst(score) update networkpolicy tests

v0.1.0-beta1

Changelog

First beta release of kube-score