Lineage
read-only · v1.0
static mock demo — no cluster connection, no oc, no credentials
Static mock demo. This page uses a small bundled sample dataset. It does not connect to a cluster, run oc, or read local credentials.

Container images

Every image running in the cluster, grouped by registry. Catches external images you didn't expect, internal-registry images that depend on ImageStreams, and shows pod attribution end-to-end.

Stale-by-digest images (1 of 1)

These spec image refs (a tag like :latest or :1.25) resolve to different digests across pods. Someone repushed the tag while pods were running — half your fleet is on the old digest, half on the new. To fix: pin to digest (image@sha256:...), or roll the deployment so all pods converge.

Image (spec ref)RegistryDistinct digestsPodsBreakdown
docker.io/library/nginx:1.25 docker.io 2 2
sha256:aaaaaa… (1 pod)
sha256:bbbbbb… (1 pod)

Registries (4 of 4)

Which container registries this cluster pulls from. Public registries used by your workloads are particularly worth knowing about.

RegistryTypeImagesPods usingUsed by yours
quay.io Red Hat 2 2 yes
docker.io public 1 2 yes
image-registry.openshift-image-registry.svc:5000 internal registry 1 1 yes
registry.redhat.io Red Hat 1 1 yes

Images (5 of 5)

5 matching

ImageRegistryPodsUsed in
docker.io/library/nginx:1.25 docker.io public 2 mine-platform
…openshift-image-registry.svc:5000/mine-platform/api:latest image-registry.openshift-image-registry.svc:5000 internal 1 mine-platform
quay.io/buildah/stable:v1.35 quay.io public 1 ci
registry.redhat.io/rhel8/support-tools:latest registry.redhat.io RH 1 mine-platform
quay.io/openshift-release-dev/ocp-release@sha256:fake quay.io RH 1 openshift-authentication

ImageStreams (2 of 2)

OpenShift ImageStreams. used_by counts pods whose container image references the stream's repository.

NameNamespaceTagsUsed by podsCreated
base shared-images ubi 0 pods 1y
api mine-platform latest
1 pod
1y