https://wolkwacht.nl/tags/kubebuddy/ Recent content in KubeBuddy on Wolkwacht https://wolkwacht.nl/images/branding/feature-image.png https://wolkwacht.nl/images/branding/feature-image.png Hugo en-us Sun, 06 Sep 2026 00:00:00 +0200 https://wolkwacht.nl/posts/2026-08-25_kubebuddy--an-agentless-second-opinion-for-kubernetes/ Sun, 06 Sep 2026 00:00:00 +0200 https://wolkwacht.nl/posts/2026-08-25_kubebuddy--an-agentless-second-opinion-for-kubernetes/ <p><img alt="An external diagnostic drone scans a Kubernetes cluster without entering its boundary" loading="lazy" src="https://wolkwacht.nl/images/2026/kubebuddy-feature.png"></p> <p>Kubernetes is very good at reporting desired state. A Deployment can be available while its pods restart every few hours. A cluster can show green nodes while workloads have no disruption budgets, probes, resource limits, or network isolation. Dashboards show signals; they do not necessarily connect them into an operational judgment.</p> <p>That is the gap <a href="https://kubebuddy.io/">KubeBuddy</a> tries to fill. The open-source KubeDeck project is a Go-based command-line scanner that connects through an existing Kubernetes context and evaluates cluster health, workloads, security, RBAC, networking, storage, and configuration. It can add provider-specific checks for AKS and GKE and emit terminal, HTML, JSON, and CSV output. There is no controller, Helm release, or long-running agent to install in the cluster.</p>