configure_ns_quotas

Configure namespace resource quotas [MTB-PL1-CC-FNS-1]

Profile Applicability:

1

Type:

Configuration

Category:

Fairness

Description:

Namespace resource quotas should be used to allocate, track, and limit a tenant's use of shared resources.

Rationale:

Resource quotas must be configured for each tenant namespace, to guarantee isolation and fairness across tenants.

Audit:

Run the following command to show configured quotas. Make sure that a quota is configured for CPU, memory, and storage resources.

kubectl --kubeconfig=tenant-a -n a1 describe quota

Remediation:

Create ResourceQuota object, you can use the configuration file present in quotas directory, example kubectl apply -f test/quotas/ns_quota.yaml

namespaceRequired:

1