Azure Kubernetes Cluster (AKS) Nodes Don't Limit the Maximum Pods to Greater than 50
Description
Code Example
terraform
resource "azurerm_kubernetes_cluster" "example" {
name = "example-aks"
location = azurerm_resource_group.example.location
resource_group_name = azurerm_resource_group.example.name
default_node_pool {
name = "default"
+ max_pods = 50
}
tags = {
Environment = "dev"
}
}
# OR For separate node pool
resource "azurerm_kubernetes_cluster_node_pool" "example" {
name = "example"
kubernetes_cluster_id = azurerm_kubernetes_cluster.example.id
+ max_pods = 50
}Remediation
Terraform
- Resource: azurerm_kubernetes_cluster, azurerm_kubernetes_cluster_node_pool
- Arguments: max_pods
Rule Details
| Field | Value |
|---|---|
| ID | IAC-0675 |
| Severity | LOW |
| IaC Type | arm |
| Frameworks | Terraform, |
| Checkov ID | CKV_AZURE_168 |