turbot/steampipe-mod-kubernetes-compliance

Control: Deployment containers should have readiness probe

Description

Containers in Deployment definition should have readiness probe. The readiness probes in turn also check dependencies like database connections or other services your container is depending on to fulfill it’s work.

Usage

Run the control in your terminal:

powerpipe control run kubernetes_compliance.control.deployment_container_readiness_probe

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run kubernetes_compliance.control.deployment_container_readiness_probe --share

SQL

This control uses a named query:

select
coalesce(uid, concat(path, ':', start_line)) as resource,
case
when c -> 'readinessProbe' is not null then 'ok'
else 'alarm'
end as status,
case
when c -> 'readinessProbe' is not null then c ->> 'name' || ' has readiness probe.'
else c ->> 'name' || ' does not have readiness probe.'
end as reason,
name as deployment_name
, coalesce(context_name, '') as context_name, namespace, source_type, coalesce(path || ':' || start_line || '-' || end_line, '') as path
from
kubernetes_deployment,
jsonb_array_elements(template -> 'spec' -> 'containers') as c;

Tags