ghostwritten/kubeowler-node-inspector repository overview

⁠Kubeowler Node Inspector

A lightweight DaemonSet image that runs on every Kubernetes node to collect host-level metrics and system data. Kubeowler fetches this data and includes it in cluster health inspection reports.

⁠What It Does

• Per-node data collection: CPU, memory, disk usage, load averages, swap status
• System information: OS version, kernel version, uptime, container runtime
• Service health: journald, NTP sync, crontab presence
• Security: SELinux status, sysctl parameters
• Certificates: Expiration dates of node-level certificates discovered from process cmdlines
• Runtime-agnostic: No crictl or container runtime socket required—works with containerd, Docker, and CRI-O

⁠How It Works

1. Deploy the DaemonSet—one Pod runs on each node
2. Each Pod runs a script that reads /proc, /sys, /etc (read-only) and outputs a single JSON object to stdout
3. Kubeowler lists Pods with label app=kubeowler-node-inspector, fetches their logs, parses the JSON, and writes the "Node Inspection" section of the report

⁠Quick Start

kubectl apply -f https://raw.githubusercontent.com/Ghostwritten/kubeowler/main/deploy/node-inspector/daemonset.yaml⁠