Update deployment.yaml #2
Conversation
![bridgecrew[bot]](https://avatars.githubusercontent.com/in/52968?s=60&v=4){kind=small}
| @@ -43,3 +43,37 @@ spec: | |||
| targetPort: 80 | |||
| selector: | |||
| app: health-check | |||
| --- | |||
| apiVersion: apps/v1 | |||
There was a problem hiding this comment.
Error Description: Do not expose the docker daemon socket to containers
Category: Kubernetes | Severity: MEDIUM
Resource: Deployment [my-deployment], lines: 47 - 79
| @@ -43,3 +43,37 @@ spec: | |||
| targetPort: 80 | |||
| selector: | |||
| app: health-check | |||
| --- | |||
| apiVersion: apps/v1 | |||
There was a problem hiding this comment.
Error Description: Apply security context to your pods and containers
Category: Kubernetes | Severity: INFO
Resource: Deployment [my-deployment], lines: 47 - 79
| @@ -43,3 +43,37 @@ spec: | |||
| targetPort: 80 | |||
| selector: | |||
| app: health-check | |||
| --- | |||
| apiVersion: apps/v1 | |||
There was a problem hiding this comment.
Error Description: Minimize the admission of root containers
Category: Kubernetes | Severity: MEDIUM
Resource: Deployment [my-deployment], lines: 47 - 79
| @@ -43,3 +43,37 @@ spec: | |||
| targetPort: 80 | |||
| selector: | |||
| app: health-check | |||
| --- | |||
| apiVersion: apps/v1 | |||
There was a problem hiding this comment.
Error Description: Containers should run as a high UID to avoid host conflict
Category: Kubernetes | Severity: LOW
Resource: Deployment [my-deployment], lines: 47 - 79
| @@ -43,3 +43,37 @@ spec: | |||
| targetPort: 80 | |||
| selector: | |||
| app: health-check | |||
| --- | |||
| apiVersion: apps/v1 | |||
There was a problem hiding this comment.
Error Description: Ensure that the seccomp profile is set to docker/default or runtime/default
Category: Kubernetes | Severity: INFO
Resource: Deployment [my-deployment], lines: 47 - 79
| app: deploy | ||
| spec: | ||
| containers: | ||
| - name: health-check |
There was a problem hiding this comment.
Error Description: Memory requests should be set
Category: Kubernetes | Severity: INFO
Resource: Deployment [my-deployment], lines: 61 - 74
| app: deploy | ||
| spec: | ||
| containers: | ||
| - name: health-check |
There was a problem hiding this comment.
Error Description: Minimize the admission of containers with capabilities assigned
Category: Kubernetes | Severity: INFO
Resource: Deployment [my-deployment], lines: 61 - 74
| app: deploy | ||
| spec: | ||
| containers: | ||
| - name: health-check |
There was a problem hiding this comment.
Error Description: Container should not be privileged
Category: Kubernetes | Severity: HIGH
Resource: Deployment [my-deployment], lines: 61 - 74
| app: deploy | ||
| spec: | ||
| containers: | ||
| - name: health-check |
There was a problem hiding this comment.
Error Description: Use read-only filesystem for containers where possible
Category: Kubernetes | Severity: LOW
Resource: Deployment [my-deployment], lines: 61 - 74
| app: deploy | ||
| spec: | ||
| containers: | ||
| - name: health-check |
There was a problem hiding this comment.
Error Description: Readiness Probe Should be Configured
Category: Kubernetes | Severity: INFO
Resource: Deployment [my-deployment], lines: 61 - 74
No description provided.