turbot/kubernetes_compliance

Query: namespace_limit_range_default_memory_request

Usage

powerpipe query kubernetes_compliance.query.namespace_limit_range_default_memory_request

SQL

with default_limit_range as (
select
namespace,
l -> 'default' as default_limit,
l -> 'defaultRequest' as default_request
from
kubernetes_limit_range,
jsonb_array_elements(spec_limits) as l
)
select
coalesce(n.uid, concat(n.path, ':', n.start_line)) as resource,
case
when default_request ->> 'memory' is null then 'alarm'
else 'ok'
end as status,
case
when default_request ->> 'memory' is null then n.name || ' do not have LimitRange default memory request.'
else n.name || ' has LimitRange default memory request.'
end as reason
, coalesce(n.context_name, '') as context_name, n.name, n.source_type, coalesce(n.path || ':' || n.start_line || '-' || n.end_line, '') as path
from
kubernetes_namespace n
left join default_limit_range r
on n.name = r.namespace;

Controls

The query is being used by the following controls: