kubescape-c-0004-deny-resources-with-memory-limit-or-request-not-set.md

Kubescape C-0004: Deny Resources with memory limit or request not set

Severity Level: High

Configuration Parameters:

• memoryRequestMin.
• memoryRequestMax.
• memoryLimitMin.
• memoryLimitMax.

Resources this policy could be applied to:

• CronJob
• DaemonSet
• Deployment
• Job
• Pod
• ReplicaSet
• StatefulSet

What does this policy do:

This Policy checks for every container in the resource:

• If resources.requests.memory is set.

• If resources.requests.memory >= memoryRequestMin.

• If resources.requests.memory <= memoryRequestMax.

• If resources.limits.memory is set.

• If resources.limits.memory >= memoryLimitMin.

• If resources.limits.memory <= memoryLimitMax.

If any of the above checks fail, the resource is denied from being deployed in the cluster.

Implementing this policy in the Cluster:

Refer here for using the policy in the cluster