Liveness probe is not configured misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_K8S_8
Category - Subcategory	Kubernetes - Logging And Monitoring
Provider	OTHER
Severity	LOW
Framework	Helm, Kubernetes, Kustomize, Terraform, Terraform Plan

Impact

The kubelet uses liveness probes to know when to schedule restarts for containers. Restarting a container in a deadlock state can help to make the application more available, despite bugs. If a container is unresponsive, either to a deadlocked application or a multi-threading defect, restarting the container can make the application more available, despite the defect.

How to Fix

Resource: Container

• Field: livenessProbe (Optional) The probe describes a health check to be performed against a container to determine whether it is alive or not. Its arguments may include: exec, failureThreshold, httpGet, initialDelaySeconds, periodSeconds, successThreshold, tcpSocket and timeoutSeconds. [source,go]

---

apiVersion: v1 kind: Pod metadata: name: spec: containers:

• name: image:

• livenessProbe:

---