Control: StatefulSet containers should have liveness probe
Description
Containers in StatefulSet definition should have liveness probe. The liveness probes are to check if the container is started and alive. If this isn’t the case, kubernetes will eventually restart the container.
Usage
Run the control in your terminal:
powerpipe control run kubernetes_compliance.control.statefulset_container_liveness_probeSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run kubernetes_compliance.control.statefulset_container_liveness_probe --shareSQL
This control uses a named query:
select coalesce(uid, concat(path, ':', start_line)) as resource, case when c -> 'livenessProbe' is not null then 'ok' else 'alarm' end as status, case when c -> 'livenessProbe' is not null then c ->> 'name' || ' has liveness probe.' else c ->> 'name' || ' does not have liveness probe.' end as reason, name as stateful_set_name , coalesce(context_name, '') as context_name, namespace, source_type, coalesce(path || ':' || start_line || '-' || end_line, '') as pathfrom kubernetes_stateful_set, jsonb_array_elements(template -> 'spec' -> 'containers') as c;