kubeeye
覆盖多种检测规则，能自动化发现配置与运行时问题，适合运维与安全检查。
需访问 Kubernetes 集群并创建/管理扩展，可能要求较高权限。
用于在 KubeSphere/Kubernetes 集群中安装并运行 KubeEye 巡检与规则检测。
可在 KubeSphere 或 Kubernetes 集群里安装并运行 KubeEye，用来做整集群的巡检和规则检测，能创建和管理 InspectRule/InspectPlan，并取回检测报告。常在需要排查节点、工作负载、配置或组件异常时使用，支持基于 OPA/Rego、PromQL 的策略，也能做文件完整性、sysctl、systemd 等专项检查。特点是作为 KubeSphere 扩展部署、支持多种规则类型并能产出结构化报告，适合日常与合规巡检。
▸ 展开 SKILL.md 英文原文
Use when deploying KubeEye for cluster inspection, creating InspectRule/InspectPlan resources, or retrieving inspection results. Covers InstallPlan-based deployment, OPA/PromQL/FileChange/Sysctl/Systemd/NodeInfo/FileFilter/ServiceConnect/CustomCommand rule types, and report retrieval. Always consult this skill when the user mentions KubeEye, cluster inspection, InspectRule, InspectPlan, or inspection reports.
帮我安装这个 skill：https://raw.githubusercontent.com/kubesphere/kubesphere/master/skills/kubeeye/SKILL.mdcurl -fsSL "https://raw.githubusercontent.com/kubesphere/kubesphere/master/skills/kubeeye/SKILL.md"# KubeEye
## Overview
KubeEye is a Kubernetes cluster inspection tool for KubeSphere. It detects issues in workloads, nodes, configurations, and components through OPA/Rego policies, PromQL queries, file integrity checks, kernel parameter validation, and systemd health checks. It is installed as a KubeSphere extension.
## When to Use
- Installing or configuring the KubeEye cluster inspection extension in KubeSphere
- Writing cluster inspection rules (OPA, PromQL, file checks, etc.)
- Configuring periodic or one-shot inspection tasks
- Viewing or downloading cluster inspection reports
## Architecture
### Extension Installation Flow
```
kspublish (push extension to KubeSphere)
|