Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Memory Requests Not Defined @ /deploy/k8s/base/community/deployment.yaml #71

Open
AaronZhouYu opened this issue Feb 7, 2023 · 0 comments

Comments

@AaronZhouYu
Copy link
Owner

AaronZhouYu commented Feb 7, 2023

Checkmarx (IaC-Security): Memory Requests Not Defined
Checkmarx Project: AaronZhouYu/TotallySecureApp
Repository URL: https://github.com/AaronZhouYu/TotallySecureApp
Branch: main
Scan ID: d9fa6dd5-d23b-4436-b75a-41a016305f39


Memory requests should be defined for each container. This allows the kubelet to reserve the requested amount of system resources and prevents over-provisioning on individual nodes

Locations:

Result #1:
Severity: MEDIUM
State: TO_VERIFY
Status: RECURRENT
    File: /deploy/k8s/base/community/deployment.yaml[22,0]
    Expected value: metadata.name={{crapi-community}}.spec.template.spec.initContainers.name={{wait-for-mongo}}.resources.requests.memory should be defined
    Actual value: metadata.name={{crapi-community}}.spec.template.spec.initContainers.name={{wait-for-mongo}}.resources.requests.memory is undefined
    Review result in Checkmarx One: Memory Requests Not Defined

Result #2:
Severity: MEDIUM
State: TO_VERIFY
Status: RECURRENT
    File: /deploy/k8s/base/community/deployment.yaml[46,0]
    Expected value: metadata.name={{crapi-community}}.spec.template.spec.containers.name={{crapi-community}}.resources.requests.memory should be defined
    Actual value: metadata.name={{crapi-community}}.spec.template.spec.containers.name={{crapi-community}}.resources.requests.memory is undefined
    Review result in Checkmarx One: Memory Requests Not Defined

Result #3:
Severity: MEDIUM
State: TO_VERIFY
Status: RECURRENT
    File: /deploy/k8s/base/community/deployment.yaml[28,0]
    Expected value: metadata.name={{crapi-community}}.spec.template.spec.initContainers.name={{wait-for-java}}.resources.requests.memory should be defined
    Actual value: metadata.name={{crapi-community}}.spec.template.spec.initContainers.name={{wait-for-java}}.resources.requests.memory is undefined
    Review result in Checkmarx One: Memory Requests Not Defined

Result #4:
Severity: MEDIUM
State: TO_VERIFY
Status: RECURRENT
    File: /deploy/k8s/base/community/deployment.yaml[16,0]
    Expected value: metadata.name={{crapi-community}}.spec.template.spec.initContainers.name={{wait-for-postgres}}.resources.requests.memory should be defined
    Actual value: metadata.name={{crapi-community}}.spec.template.spec.initContainers.name={{wait-for-postgres}}.resources.requests.memory is undefined
    Review result in Checkmarx One: Memory Requests Not Defined

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant