kubescape-c-0271-deny-resources-with-memory-limit-not-set.md

Kubescape C-0271: Deny Resources with memory limit not set

Severity Level: High

Configuration Parameters:

• memoryLimitMin.
• memoryLimitMax.

Resources this policy could be applied to:

• CronJob
• DaemonSet
• Deployment
• Job
• Pod
• ReplicaSet
• StatefulSet

What does this policy do:

This Policy checks for every container in the resource:

• If resources.limits.memory is set.
• If resources.limits.memory >= memoryLimitMin.
• If resources.limits.memory <= memoryLimitMax.

If any of the above checks fail, the resource is denied from being deployed in the cluster.

Implementing this policy in the Cluster:

Refer here for using the policy in the cluster