Detections
Analytics
Ensure Memory request is set for Kubernetes workloads
MEDIUM
Description
If Memory request is not set in Kubernetes workload configuration file then the exploited container can be used for malicious activities such as cryptomining.
Remediation
Make sure your Kubernetes workload configuration's argument: 'resources:requests:memory' is set to required value.
Policy Details
Rule Reference ID: AC_K8S_0099
CSP: Kubernetes
Remediation Available: No
Domain: Security Best Practices
Resource: kubernetes_pod
Resource Category: Compute
Resource Type: Pod