Summary
Sonar rule kubernetes:S6864 flags containers that define resource requests but no limits.memory. Without a memory limit a container can consume all available memory on a node, starving other workloads and potentially causing a DoS condition.
Change
In config/samples/deploy.yaml, the standalone container had requests.memory: 600Mi but no limits.memory. Added limits.memory: 600Mi to match the request value.
Prevention
No local Kubernetes linter is configured in this repo — Sonar remains the guard. Adding kube-linter or kubeconform to CI would catch this class of issue earlier.
Summary
Sonar rule kubernetes:S6864 flags containers that define resource
requestsbut nolimits.memory. Without a memory limit a container can consume all available memory on a node, starving other workloads and potentially causing a DoS condition.Change
In
config/samples/deploy.yaml, thestandalonecontainer hadrequests.memory: 600Mibut nolimits.memory. Addedlimits.memory: 600Mito match the request value.Prevention
No local Kubernetes linter is configured in this repo — Sonar remains the guard. Adding
kube-linterorkubeconformto CI would catch this class of issue earlier.