The container must have resource request limits set.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-270875 | SRG-APP-000247 | SRG-APP-000247-CTR-000330 | SV-270875r1050646_rule | 2024-12-05 | 2 |
| Description |
|---|
| Setting a container resource request limit allows the container platform to determine the best location for the container to execute. The container platform looks at the resources available and finds the location that will require the minimum resources for the container to execute. Examples of resources that can be specified are CPU, memory, and storage. |
| ℹ️ Check |
|---|
| Review the container platform configuration to determine that resource limits are set. If the container platform does not enforce resource limits, this is a finding. |
| ✔️ Fix |
|---|
| Configure the container platform to restrict the ability of users or other systems to launch denial-of-service (DoS) attacks from the container platform components by setting resource limits on resources such as memory, storage, and CPU utilization. |