CPU limits can prevent containers from consuming valuable compute time for no benefit (e.g. inefficient code) that might lead to unnecessary costs. It is advisable to also configure CPU requests to ensure application stability.
You can resolve it by...
Add resources.limits.cpu field with required CPU limit value
Date of report: 12/06/2022 Severity: Moderate and Low (not active in production)
Due date is based on severity and described in RA-5. 15-days for Critical, 30-days for High, and 90-days for Moderate and lower.
[DocId: 0] › input › spec › template › spec › containers[app-2048] › securityContext › runAsNonRoot
securityContext.runAsNonRoot
totrue
[DocId: 0] › input › spec › template › spec › containers[app-2048] › securityContext › capabilities › drop
ALL
tosecurityContext.capabilities.drop
list, and add only required capabilities insecurityContext.capabilities.add
[DocId: 0] › spec › template › spec › containers[app-2048] › livenessProbe
livenessProbe
attribute[DocId: 0] › input › spec › template › spec › containers[app-2048] › securityContext › readOnlyRootFilesystem
readOnlyRootFilesystem
attribute is not set totrue
to
true`[DocId: 0] › input › spec › template › spec › containers[app-2048] › resources › limits › cpu
resources.limits.cpu
field with required CPU limit value[DocId: 0] › input › spec › template › spec › containers[app-2048] › resources › limits › memory
resources.limits.memory
value