Furkan Türkal

fix(analyse_prometheus): store errors instead of exit

7

Fixes #236 Make sure you have `metrics-in-grafana.json` file in the directory. ```golang $ go run ./cmd/cortextool analyse prometheus --address --log.level="debug" --read-timeout=5m ```  Signed-off-by:...

Currently, we can't set the default time range (window) between `start` and `end` times. ``` $ cortextool analyse prometheus --address http://10.10.10.10:30090 --log.level="debug" INFO[0000] log level set to debug cortextool: error:...

Consider add some docs and images about the overall architecture

15

It would be great to see how does this project work and how overall architecture is designed! Maybe adding some arch.md or some diagrams in the [./docs](https://github.com/containers/netavark/tree/main/docs) folder would be...

store serialized JWT token in []byte instead in the JWT-SVID

1

Just noticed `token` field [uses](https://github.com/spiffe/go-spiffe/blob/e1b8af857d8faa88eb1060c2c52861916b152b76/v2/svid/jwtsvid/svid.go#L33) `string` data type. From the security perspective, shouldn't it be stored in `[]byte` instead? Since the `string` is immutable, once we've created it, if another...

Consider fixing the go.mod directive

1

https://github.com/robusta-dev/kubewatch/blob/4730af84d096fabf3d0c5a2aae15d666baac141b/go.mod#L1 ```diff - github.com/bitnami-labs/kubewatch + github.com/robusta-dev/kubewatch ```

Consider make falco-plugin-scoffolding repository

23

**Motivation** The idea is inspired by [terraform-provider-scaffolding](https://github.com/hashicorp/terraform-provider-scaffolding) project, which makes life easier to create custom providers from scratch by using [template-project](https://docs.github.com/en/repositories/creating-and-managing-repositories/creating-a-template-repository). In this project, we have [plugins](https://github.com/falcosecurity/plugins) folder to demonstrate...

[Enhancement] Make CLI docs partially auto-generated to avoid inconsistencies and drifts between doc <> source

1

### Description The official doc says Kyverno has default `300/300` QPS/Burst: https://kyverno.io/docs/installation/customization/#container-flags for `clientRateLimitBurst` and `clientRateLimitQPS`. But its actually `20/50`: https://github.com/kyverno/kyverno/blob/2803f4fcb910baced20d153b663c7c282a6e755b/cmd/internal/flag.go#L114-L119 It'd be great to make both of `ConfigMap Keys`...

feat: make healthcheck more resilient (retry + reconnect)

1

In current implementation, I noticed healthcheck function [^1] does not support for retrying along with graceful handling. [^2] **Proposal** It would be nice to add a something `failureThreshold` to `ConfigHealthCheck`....

**Description** In cosign there is a `dev.sigstore.cosign` label that consuming from `certkey`, `chainkey` and `BundleKey` [fields](https://github.com/sigstore/cosign/blob/6b42e475755f38119e457ffcf3efc632c165d42d/pkg/oci/internal/signature/layer.go#L34-L36). For `sigkey` field, please refer: https://github.com/sigstore/cosign/issues/1532 So I thought it would be nice to...

get pod events in case pod status is not "running"

7

I could not see the `reason` why it's in `pending` state. So, we have to run `k get events` to check what is going on exactly. ```bash $ k pod-inspect...