kubescape-c-0050-deny-resources-with-cpu-limit-or-request-not-set.md

Kubescape C-0004: Deny Resources with cpu limit or request not set

Severity Level: High

Configuration Parameters:

• cpuRequestMin.
• cpuRequestMax.
• cpuLimitMin.
• cpuLimitMax.

Resources this policy could be applied to:

• CronJob
• DaemonSet
• Deployment
• Job
• Pod
• ReplicaSet
• StatefulSet

What does this policy do:

This Policy checks for every container in the resource:

• If resources.requests.cpu is set.

• If resources.requests.cpu >= cpuRequestMin.

• If resources.requests.cpu <= cpuRequestMax.

• If resources.limits.cpu is set.

• If resources.limits.cpu >= cpuLimitMin.

• If resources.limits.cpu <= cpuLimitMax.

If any of the above checks fail, the resource is denied from being deployed in the cluster.

Implementing this policy in the Cluster:

Refer here for using the policy in the cluster