diff --git a/rules/ansible.yml b/rules/ansible.yml index 9e5b019..965b2a9 100644 --- a/rules/ansible.yml +++ b/rules/ansible.yml @@ -7,7 +7,6 @@ rules: - playbook select: '$' - check: type: array items: @@ -39,7 +38,6 @@ rules: - role select: '$' - check: type: array items: diff --git a/rules/kubernetes.yml b/rules/kubernetes.yml index e452f4f..139bed2 100644 --- a/rules/kubernetes.yml +++ b/rules/kubernetes.yml @@ -48,8 +48,7 @@ rules: - optional select: '$.spec.template.spec.containers[*].resources' - - # filter low-cpu resource limits + # filter containers with cpu limits filter: type: object properties: @@ -58,7 +57,7 @@ rules: properties: cpu: type: string - pattern: "[0-9]{1,3}m" + pattern: "[0-9]+m" # ensure the limits aren't *too* low check: @@ -69,7 +68,7 @@ rules: properties: cpu: type: string - pattern: "[0-9]{3}m" + pattern: "[1-9][0-9]{2,}m" - name: kubernetes-deployment-replicas desc: deployments must specify a positive replica count