68 lines
1.7 KiB
YAML
68 lines
1.7 KiB
YAML
rules:
|
|
- name: kubernetes-resources
|
|
desc: containers must have complete resources specified
|
|
level: info
|
|
tags:
|
|
- cluster-health
|
|
- important
|
|
|
|
select: '$.spec.template.spec.containers[*]'
|
|
filter:
|
|
type: object
|
|
|
|
check:
|
|
type: object
|
|
additionalProperties: true
|
|
required: [resources]
|
|
properties:
|
|
resources:
|
|
type: object
|
|
required: [limits, requests]
|
|
properties:
|
|
limits:
|
|
type: object
|
|
required: [cpu, memory]
|
|
properties:
|
|
cpu: &resources-cpu
|
|
oneOf:
|
|
- type: number
|
|
- type: string
|
|
pattern: "[1-9][0-9]*m"
|
|
memory: &resources-memory
|
|
oneOf:
|
|
- type: number
|
|
- type: string
|
|
pattern: "[1-9][0-9]*[KMG]i"
|
|
requests:
|
|
type: object
|
|
required: [cpu, memory]
|
|
properties:
|
|
cpu: *resources-cpu
|
|
memory: *resources-memory
|
|
|
|
- name: kubernetes-resources-minimum-cpu
|
|
desc: resource limits are too low
|
|
level: debug
|
|
tags:
|
|
- optional
|
|
|
|
select: '$.spec.template.spec.containers[*].resources'
|
|
filter:
|
|
type: object
|
|
properties:
|
|
limits:
|
|
type: object
|
|
properties:
|
|
cpu:
|
|
type: string
|
|
pattern: "[0-9]{1,3}m"
|
|
|
|
check:
|
|
type: object
|
|
properties:
|
|
limits:
|
|
type: object
|
|
properties:
|
|
cpu:
|
|
type: string
|
|
pattern: "[0-9]{3}m" |