Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CPU Limits Not Set @ /deploy/k8s/base/community/deployment.yaml #209

Open
AaronZhouYu opened this issue Feb 7, 2023 · 0 comments
Open

Comments

@AaronZhouYu
Copy link
Owner

AaronZhouYu commented Feb 7, 2023

Checkmarx (IaC-Security): CPU Limits Not Set
Checkmarx Project: AaronZhouYu/TotallySecureApp
Repository URL: https://github.com/AaronZhouYu/TotallySecureApp
Branch: main
Scan ID: d9fa6dd5-d23b-4436-b75a-41a016305f39


CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests

Locations:

Result #1:
Severity: MEDIUM
State: TO_VERIFY
Status: RECURRENT
    File: /deploy/k8s/base/community/deployment.yaml[28,0]
    Expected value: spec.template.spec.initContainers.name=wait-for-java has resources defined
    Actual value: spec.template.spec.initContainers.name=wait-for-java doesn't have resources defined
    Review result in Checkmarx One: CPU Limits Not Set

Result #2:
Severity: MEDIUM
State: TO_VERIFY
Status: RECURRENT
    File: /deploy/k8s/base/community/deployment.yaml[22,0]
    Expected value: spec.template.spec.initContainers.name=wait-for-mongo has resources defined
    Actual value: spec.template.spec.initContainers.name=wait-for-mongo doesn't have resources defined
    Review result in Checkmarx One: CPU Limits Not Set

Result #3:
Severity: MEDIUM
State: TO_VERIFY
Status: RECURRENT
    File: /deploy/k8s/base/community/deployment.yaml[16,0]
    Expected value: spec.template.spec.initContainers.name=wait-for-postgres has resources defined
    Actual value: spec.template.spec.initContainers.name=wait-for-postgres doesn't have resources defined
    Review result in Checkmarx One: CPU Limits Not Set

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant