resource quota usage

Property
Language
Severity

Description#

The configuration is missing a ResourceQuota policy that enforces memory and CPU limits within each Kubernetes namespace, allowing resources to be consumed without restriction. This absence fails to control aggregate resource usage across workloads.

Impact#

Without enforced resource quotas, a single workload or user could consume excessive memory or CPU within a namespace, potentially leading to service degradation, denial of service, or disruption of other applications running in the same cluster.

Resolution#

create resource quota policy with mem and cpu quota per each namespace