C-0018 - Configured readiness probe

Configured readiness probe

Framework

DevOpsBest, AllControls, YAML-scanning

Severity

Low

Description of the the issue

Readiness probe is intended to ensure that workload is ready to process network traffic. It is highly recommended to define readiness probe for every worker container. This control finds all the PODs where the readiness probe is not configured.

Related resources

CronJob, DaemonSet, Deployment, Job, Pod, ReplicaSet, StatefulSet

What does this control test

Readiness probe is intended to ensure that workload is ready to process network traffic. It is highly recommended to define readiness probe for every worker container. This control finds all the PODs where the readiness probe is not configured.

Remediation

Ensure Readiness probes are configured wherever possible.

Example

readinessProbe:  # we are looking for this section in the resource definition
  exec:
    command:
    - cat
    - /tmp/healthy
  initialDelaySeconds: 5
  periodSeconds: 5