Containers running without CPU and memory limits pose a significant risk to the shared resources within a cluster. In the absence of predefined limits, containers have the potential to overuse CPU and memory resources, creating an environment where resource exhaustion becomes a concern. In the event of a compromised container, an adversary could exploit this lack of constraints to execute a denial-of-service attack on other containers within the same cluster. By intentionally consuming excessive resources, the compromised container can impact the overall performance and availability of the entire cluster.

Remediation

Apply CPU and memory limit