kuma

1
checks:
2
  addAllBuiltIn: true
3
  exclude:
4
    - "unset-cpu-requirements"
5
    # Look at https://github.com/kumahq/kuma/issues/8908 to reenable all these
6
    - dnsconfig-options
7
    - access-to-secrets
8
    - minimum-three-replicas
9
    - no-liveness-probe
10
    - no-readiness-probe
11
    - required-label-owner
12
    - required-annotation-email
13
    - access-to-create-pods
14
    - no-node-affinity
15
    - non-isolated-pod
16
    - no-rolling-update-strategy
17
    - writable-host-mount
18
    - exposed-services
19
    - use-namespace
20

21
customChecks:
22
- name: "unset-cpu-requests"
23
  description: "Indicates when containers do not have CPU requests set."
24
  scope:
25
    objectKinds:
26
      - DeploymentLike
27
  remediation: >-
28
    Set CPU requests for your container based on its requirements.
29
    Refer to https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/#requests-and-limits for details.
30
  template: "cpu-requirements"
31
  params:
32
    requirementsType: "request"
33
    lowerBoundMillis: 0
34
    upperBoundMillis: 0
35