prowler icon indicating copy to clipboard operation
prowler copied to clipboard

feat(kubernetes): checks for liveness,readienss and cpu limit

Open deepak7093 opened this issue 4 weeks ago • 4 comments

### Context

Feature request 7630

Description

Added new checks for kubernetes provider for

  1. Ensure liveness probe is configured
  2. Ensure readiness probe is configured
  3. Ensure CPU request is set
  4. Ensure CPU limits are set
  5. Ensure memory requests are set
  6. Ensure memory limits are set
  7. Ensure image tag is set

Steps to review

poetry run python prowler-cli.py kubernetes --list-checks

This should include above checks in the list

License

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

deepak7093 avatar Nov 30 '25 11:11 deepak7093

Conflict Markers Resolved

All conflict markers have been successfully resolved in this pull request.

github-actions[bot] avatar Nov 30 '25 11:11 github-actions[bot]

Codecov Report

:white_check_mark: All modified and coverable lines are covered by tests. :white_check_mark: Project coverage is 58.94%. Comparing base (b2abdbe) to head (e279011). :warning: Report is 50 commits behind head on master.

:exclamation: There is a different number of reports uploaded between BASE (b2abdbe) and HEAD (e279011). Click for more details.

HEAD has 4 uploads less than BASE
Flag BASE (b2abdbe) HEAD (e279011)
prowler-py3.10-gcp 1 0
prowler-py3.12-gcp 1 0
prowler-py3.11-gcp 1 0
prowler-py3.9-gcp 1 0
Additional details and impacted files
@@             Coverage Diff             @@
##           master    #9353       +/-   ##
===========================================
- Coverage   92.99%   58.94%   -34.06%     
===========================================
  Files         125        8      -117     
  Lines        2998      397     -2601     
===========================================
- Hits         2788      234     -2554     
+ Misses        210      163       -47     
Flag Coverage Δ
prowler-py3.10-gcp ?
prowler-py3.10-kubernetes 58.94% <ø> (?)
prowler-py3.11-gcp ?
prowler-py3.11-kubernetes 58.94% <ø> (?)
prowler-py3.12-gcp ?
prowler-py3.12-kubernetes 58.94% <ø> (?)
prowler-py3.9-gcp ?
prowler-py3.9-kubernetes 58.94% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

Components Coverage Δ
prowler 58.94% <ø> (-34.06%) :arrow_down:
api ∅ <ø> (∅)
:rocket: New features to boost your workflow:
  • :snowflake: Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • :package: JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

codecov[bot] avatar Nov 30 '25 11:11 codecov[bot]

Hi @deepak7093,

Metadata should look like this: https://github.com/prowler-cloud/prowler/blob/master/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_root_usage/cloudwatch_log_metric_filter_root_usage.metadata.json

You have several examples in aws provider, despite all services have not been updated yet.

HugoPBrito avatar Dec 04 '25 09:12 HugoPBrito

Hi @deepak7093,

Metadata should look like this: https://github.com/prowler-cloud/prowler/blob/master/prowler/providers/aws/services/cloudwatch/cloudwatch_log_metric_filter_root_usage/cloudwatch_log_metric_filter_root_usage.metadata.json

You have several examples in aws provider, despite all services have not been updated yet.

Updated metadata please review

deepak7093 avatar Dec 08 '25 16:12 deepak7093