Memory not limited

Property
Language
Severity

Description#

The configuration does not set a memory limit for containers, allowing them to consume unlimited memory resources. This omission fails to enforce resource boundaries in Kubernetes workloads.

Impact#

Without memory limits, a container can exhaust node memory, potentially causing denial of service by crashing other workloads or the entire node. This makes the cluster vulnerable to accidental overloads or intentional resource exhaustion attacks.

Resolution#

Set a limit value under ‘containers[].resources.limits.memory’.