turbot/steampipe-mod-kubernetes-compliance

Control: Pod containers should have readiness probe

Description

Containers in Pods should have readiness probe. The readiness probes in turn also check dependencies like database connections or other services your container is depending on to fulfill it’s work.

Usage

Run the control in your terminal:

powerpipe control run kubernetes_compliance.control.pod_container_readiness_probe

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run kubernetes_compliance.control.pod_container_readiness_probe --share

SQL

This control uses a named query:

select
coalesce(uid, concat(path, ':', start_line)) as resource,
case
when c -> 'readinessProbe' is not null then 'ok'
else 'alarm'
end as status,
case
when c -> 'readinessProbe' is not null then c ->> 'name' || ' has readiness probe.'
else c ->> 'name' || ' does not have readiness probe.'
end as reason,
name as pod_name
, coalesce(context_name, '') as context_name, namespace, source_type, coalesce(path || ':' || start_line || '-' || end_line, '') as path
from
kubernetes_pod,
jsonb_array_elements(containers) as c;

Tags