/deprek8

Evergreen policy to monitor Kubernetes APIs deprecations.

Primary LanguageOpen Policy AgentApache License 2.0Apache-2.0

deprek8

Evergreen policy to monitor Kubernetes APIs deprecations.

Quick how-to with Helm and Conftest

First, install Conftest (for MacOS users: brew install instrumenta/instrumenta/conftest)

$ cd stable/prometheus
$ curl https://raw.githubusercontent.com/naquada/deprek8/master/policy/deprek8.rego > deprek8.rego
$ $ helm template --set podSecurityPolicy.enabled=true --set server.ingress.enabled=true . | conftest test -p deprek8.rego -
WARN - Ingress/release-name-prometheus-server: API extensions/v1beta1 for PriorityClass is deprecated, use networking.k8s.io/v1beta1 instead.
FAIL - PodSecurityPolicy/release-name-prometheus-node-exporter: API extensions/v1beta1 for PodSecurityPolicy is no longer served by default, use policy/v1beta1 instead.
FAIL - DaemonSet/release-name-prometheus-node-exporter: API extensions/v1beta1 for DaemonSet is no longer served by default, use apps/v1 instead.
FAIL - Deployment/release-name-prometheus-alertmanager: API extensions/v1beta1 for Deployment is no longer served by default, use apps/v1 instead.
FAIL - Deployment/release-name-prometheus-kube-state-metrics: API extensions/v1beta1 for Deployment is no longer served by default, use apps/v1 instead.
FAIL - Deployment/release-name-prometheus-pushgateway: API extensions/v1beta1 for Deployment is no longer served by default, use apps/v1 instead.
FAIL - Deployment/release-name-prometheus-server: API extensions/v1beta1 for Deployment is no longer served by default, use apps/v1 instead.