ClusterScope: Discover outdated images in your Kubernetes cluster (opens in new tab)

(replicated.com)

79 pointsgrantlmiller7y ago8 comments

8 comments

5 comments · 2 top-level

nictrix7y ago· 3 in thread

Great tool, used it before. Simple and straightforward. I'd like to use it for internal image repos, upcoming feature?

That's a great idea. We've tried to keep this current version of ClusterScope as transparent as possible, and not require any secrets. It works by using the http registry api to get a list of tags, and then sorting them to determine how current your image is. To support private registries, we'd want to run this on your laptop or cluster to avoid having to collect any registry secrets. That's definitely an option, we could make this run locally so that you wouldn't have to share credentials with us. (I contributed to the ClusterScope tool)

sleepybrett7y ago

I'm not submitting my running cluster images to a rando website, sorry.

grantlmillerOP7y ago

ya, this doesn't install anything in the cluster, you run the command on your cluster, sanitize the private image info out of it, then paste in the public image names & SHAs

2 more replies

icebraining7y ago

Nice tool. I get it's mostly a way to promote the company, but I could see my company paying a small fee for an API endpoint (so we could just pipe the command to curl and get a formatted report).

Small bug: If the image is not in the official registry and doesn't have a version tag, it's reported as "Up to date" (try just inserting a random string).

j / k navigate · click thread line to collapse

8 comments

5 comments · 2 top-level

nictrix7y ago· 3 in thread

Great tool, used it before. Simple and straightforward. I'd like to use it for internal image repos, upcoming feature?

marcc7y ago

That's a great idea. We've tried to keep this current version of ClusterScope as transparent as possible, and not require any secrets. It works by using the http registry api to get a list of tags, and then sorting them to determine how current your image is. To support private registries, we'd want to run this on your laptop or cluster to avoid having to collect any registry secrets. That's definitely an option, we could make this run locally so that you wouldn't have to share credentials with us. (I contributed to the ClusterScope tool)

sleepybrett7y ago

I'm not submitting my running cluster images to a rando website, sorry.

grantlmillerOP7y ago

ya, this doesn't install anything in the cluster, you run the command on your cluster, sanitize the private image info out of it, then paste in the public image names & SHAs

2 more replies

icebraining7y ago

Nice tool. I get it's mostly a way to promote the company, but I could see my company paying a small fee for an API endpoint (so we could just pipe the command to curl and get a formatted report).

Small bug: If the image is not in the official registry and doesn't have a version tag, it's reported as "Up to date" (try just inserting a random string).

j / k navigate · click thread line to collapse