kubescape-c-0269-deny-resources-with-memory-request-not-set.md

Kubescape C-0269: Deny Resources with memory request not set

Severity Level: High

Configuration Parameters:

• memoryRequestMin.
• memoryRequestMax.

Resources this policy could be applied to:

• CronJob
• DaemonSet
• Deployment
• Job
• Pod
• ReplicaSet
• StatefulSet

What does this policy do:

This Policy checks for every container in the resource:

• If resources.requests.memory is set.
• If resources.requests.memory >= memoryRequestMin.
• If resources.requests.memory <= memoryRequestMax.

If any of the above checks fail, the resource is denied from being deployed in the cluster.

Implementing this policy in the Cluster:

Refer here for using the policy in the cluster