{"action":"opened","issue":{"url":"https://api.github.com/repos/weaveworks/scope/issues/1978","repository_url":"https://api.github.com/repos/weaveworks/scope","labels_url":"https://api.github.com/repos/weaveworks/scope/issues/1978/labels{/name}","comments_url":"https://api.github.com/repos/weaveworks/scope/issues/1978/comments","events_url":"https://api.github.com/repos/weaveworks/scope/issues/1978/events","html_url":"https://github.com/weaveworks/scope/issues/1978","id":187273180,"number":1978,"title":"Indicate inbound connection for declared ports","user":{"login":"errordeveloper","id":251467,"avatar_url":"https://avatars.githubusercontent.com/u/251467?v=3","gravatar_id":"","url":"https://api.github.com/users/errordeveloper","html_url":"https://github.com/errordeveloper","followers_url":"https://api.github.com/users/errordeveloper/followers","following_url":"https://api.github.com/users/errordeveloper/following{/other_user}","gists_url":"https://api.github.com/users/errordeveloper/gists{/gist_id}","starred_url":"https://api.github.com/users/errordeveloper/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/errordeveloper/subscriptions","organizations_url":"https://api.github.com/users/errordeveloper/orgs","repos_url":"https://api.github.com/users/errordeveloper/repos","events_url":"https://api.github.com/users/errordeveloper/events{/privacy}","received_events_url":"https://api.github.com/users/errordeveloper/received_events","type":"User","site_admin":false},"labels":[{"id":402687591,"url":"https://api.github.com/repos/weaveworks/scope/labels/feature","name":"feature","color":"0e8a16","default":false},{"id":356154977,"url":"https://api.github.com/repos/weaveworks/scope/labels/k8s","name":"k8s","color":"f9d0c4","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-11-04T07:58:46Z","updated_at":"2016-11-04T07:58:46Z","closed_at":null,"body":"Scope already has a lot of information about ports and connections, it could present it much more clearly, and indicate potential misconfiguration or security issues. Below are some of the UI features that would enable many use-cases.\r\n\r\n### Docker\r\n  - exposed and published\r\n  - exposed and not published\r\n  - published and not exposed\r\n  - inbound connection count\r\n  - ports with zero inbound connections\r\n  - ports that are not declared but appear to be used\r\n\r\n### Kubernetes\r\n  - clearer relationship between pods and services\r\n    - services where selector matches pods in different deployments\r\n    - pods that have inbound connections that don't go via a service (can indicate either a security issue or confirm desired configuration is functional)\r\n    - services without any endpoints (potential indicator of a bad selector, stale service)\r\n    - headless services (i.e. not in cluster)\r\n  - ability to sort services by type (`NodePort`, `ClusterIP`, `LoadBalancer`)\r\n  - ports declared per container in a pod and for a pod overall\r\n  - ports mapped to a service\r\n  - ports not mapped to a service\r\n  - inbound connection count\r\n  - ports with zero inbound connections\r\n  - distribution of inbound connections"}}
{"actor":{"display_login":"errordeveloper"}}