Skip to main content
DevOps Insightsguides & answers

Kubernetes

What is wrong with this manifest?

Red Hat’s 2024 Kubernetes security report found that 45% of Kubernetes security incidents come from misconfiguration rather than zero-days or targeted attacks. Most of those are visible in the file you already have open.

Every finding says what breaks, not just what rule failed — and where a misconfiguration causes a named failure, it links to the page that diagnoses it. A missing memory limit leads to OOMKilled; a latest tag leads to ImagePullBackOff.

Runs in your browser · nothing is uploaded, stored or logged

Why this runs in your browser

A manifest names your registries, namespaces, hostnames and environment variables. That is real detail about your infrastructure, and this site has no reason to receive it — so it does not. The analysis is a pure function running on this page; there is no request to make, nothing is stored, and nothing is logged.

It also makes the tool safe by construction rather than by promise. Input that never reaches a server cannot be executed by one, and nothing here evaluates your YAML as anything other than data.

Related