Security Misconfiguration: Absent Resource Limit

[akondasif]

Dear Colleague,

We are looking to find ways to help developers find security misconfigurations, i.e., Kubernetes manifest configurations that violate security best practices for Kubernetes manifests.

We have noticed an instance of absent resource limit in one of your Kubernetes manifests. Without resource limits Kubernetes installations could be susceptible to DDOS attacks (reff: https://arxiv.org/pdf/2006.15275.pdf).

Location:

caastle/examples/wordpress-kubernetes-pods/wp-pod.yaml

Line 10 in bb832c6

name: wordpress

Please fix this misconfiguration by adding requests and limits as shown here (https://kubernetes.io/docs/concepts/configuration/manage-resources-containers/). We would like to hear if you agree to fix this misconfiguration or have fixed the misconfiguration.