CPU limits are not set misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_K8S_11
Category - Subcategory	Kubernetes - Resource Management
Provider	OTHER
Severity	LOW
Framework	Helm, Kubernetes, Kustomize, Terraform, Terraform Plan

Impact

Kubernetes allows administrators to set CPU quotas in namespaces, as hard limits for resource usage. Containers cannot use more CPU than the configured limit. Provided the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests. CPU quotas are used to ensure adequate utilization of shared resources. A system without managed quotas could eventually collapse due to inadequate resources for the tasks it bares.

How to Fix

Resource: Container

• Arguments: resources:limits:cpu (Optional)

Defines the CPU limit for the container. [source,go]

apiVersion: v1 kind: Pod metadata: name: spec: containers:

• name: image: resources: limits:
• cpu:

---