Kubernetes best practices

** org.openrewrite.kubernetes.KubernetesBestPractices** Applies best practices to Kubernetes manifests.
Tags
kubernetes
Source
​Github, Issue Tracker, Maven Central​
groupId: org.openrewrite.recipe
artifactId: rewrite-kubernetes
version: 1.18.0
Usage
This recipe has no required configuration options and can be activated directly after taking a dependency on org.openrewrite.recipe:rewrite-kubernetes:1.18.0 in your build file:
Gradle
Maven
build.gradle
1
plugins {
2
    id("org.openrewrite.rewrite") version("5.22.2")
3
}
4
​
5
rewrite {
6
    activeRecipe("org.openrewrite.kubernetes.KubernetesBestPractices")
7
}
8
​
9
repositories {
10
    mavenCentral()
11
}
12
​
13
dependencies {
14
    rewrite("org.openrewrite.recipe:rewrite-kubernetes:1.18.0")
15
}
Copied!
pom.xml
1
<project>
2
  <build>
3
    <plugins>
4
      <plugin>
5
        <groupId>org.openrewrite.maven</groupId>
6
        <artifactId>rewrite-maven-plugin</artifactId>
7
        <version>4.25.0</version>
8
        <configuration>
9
          <activeRecipes>
10
            <recipe>org.openrewrite.kubernetes.KubernetesBestPractices</recipe>
11
          </activeRecipes>
12
        </configuration>
13
        <dependencies>
14
          <dependency>
15
            <groupId>org.openrewrite.recipe</groupId>
16
            <artifactId>rewrite-kubernetes</artifactId>
17
            <version>1.18.0</version>
18
          </dependency>
19
        </dependencies>
20
      </plugin>
21
    </plugins>
22
  </build>
23
</project>
Copied!
Recipes can also be activated directly from the command line by adding the argument -Drewrite.activeRecipesorg.openrewrite.kubernetes.KubernetesBestPractices
Definition
Recipe List
Yaml Recipe List
​Ensure liveness probe is configured​
​Ensure readiness probe is configured​
​Ensure CPU request is set​
​Ensure CPU limits are set​
​Ensure memory request is set​
​Ensure memory limits are set​
​No privileged containers​
​Ensure lifecycle rule on StorageBucket​
​No host process ID sharing​
​No host IPC sharing​
​No root containers​
​Ensure image pull policy is Always​
​No privilege escalation​
​No host network sharing​
​Read-only root filesystem​
​Limit root capabilities in a container​
1
---
2
type: specs.openrewrite.org/v1beta/recipe
3
name: org.openrewrite.kubernetes.KubernetesBestPractices
4
displayName: Kubernetes best practices
5
description: Applies best practices to Kubernetes manifests.
6
tags:
7
  - kubernetes
8
recipeList:
9
  - org.openrewrite.kubernetes.MissingPodLivenessProbe
10
  - org.openrewrite.kubernetes.MissingPodReadinessProbe
11
  - org.openrewrite.kubernetes.MissingCpuRequest
12
  - org.openrewrite.kubernetes.MissingCpuLimits
13
  - org.openrewrite.kubernetes.MissingMemoryRequest
14
  - org.openrewrite.kubernetes.MissingMemoryLimits
15
  - org.openrewrite.kubernetes.NoPrivilegedContainers
16
  - org.openrewrite.kubernetes.LifecycleRuleOnStorageBucket
17
  - org.openrewrite.kubernetes.NoHostProcessIdSharing
18
  - org.openrewrite.kubernetes.NoHostIPCSharing
19
  - org.openrewrite.kubernetes.NoRootContainers
20
  - org.openrewrite.kubernetes.ImagePullPolicyAlways
21
  - org.openrewrite.kubernetes.NoPrivilegeEscalation
22
  - org.openrewrite.kubernetes.NoHostNetworkSharing
23
  - org.openrewrite.kubernetes.ReadOnlyRootFilesystem
24
  - org.openrewrite.kubernetes.LimitContainerCapabilities
Copied!

Ensure readiness probe is configured

Limit root capabilities in a container

Last modified 8d ago

Export as PDF

Copy link

Contents