KICS #824
Annotations
11 warnings
Analyze
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
[MEDIUM] Container Running With Low UID:
charts/centralidp/templates/job-seeding.yaml#L265
Check if containers are running with low UID, which might cause conflicts with the host's user table.
|
[MEDIUM] Container Running With Low UID:
charts/centralidp/templates/job-seeding.yaml#L32
Check if containers are running with low UID, which might cause conflicts with the host's user table.
|
[MEDIUM] Container Running With Low UID:
charts/centralidp/templates/job-seeding.yaml#L235
Check if containers are running with low UID, which might cause conflicts with the host's user table.
|
[MEDIUM] Memory Limits Not Defined:
charts/centralidp/templates/job-seeding.yaml#L235
Memory limits should be defined for each container. This prevents potential resource exhaustion by ensuring that containers consume not more than the designated amount of memory
|
[MEDIUM] Memory Limits Not Defined:
charts/centralidp/templates/job-seeding.yaml#L235
Memory limits should be defined for each container. This prevents potential resource exhaustion by ensuring that containers consume not more than the designated amount of memory
|
[MEDIUM] Memory Requests Not Defined:
charts/centralidp/templates/job-seeding.yaml#L235
Memory requests should be defined for each container. This allows the kubelet to reserve the requested amount of system resources and prevents over-provisioning on individual nodes
|
[MEDIUM] Memory Requests Not Defined:
charts/centralidp/templates/job-seeding.yaml#L235
Memory requests should be defined for each container. This allows the kubelet to reserve the requested amount of system resources and prevents over-provisioning on individual nodes
|
[MEDIUM] Seccomp Profile Is Not Configured:
charts/centralidp/templates/job-seeding.yaml#L32
Containers should be configured with a secure Seccomp profile to restrict potentially dangerous syscalls
|
[MEDIUM] Seccomp Profile Is Not Configured:
charts/centralidp/templates/job-seeding.yaml#L235
Containers should be configured with a secure Seccomp profile to restrict potentially dangerous syscalls
|
[MEDIUM] Seccomp Profile Is Not Configured:
charts/centralidp/templates/job-seeding.yaml#L235
Containers should be configured with a secure Seccomp profile to restrict potentially dangerous syscalls
|