Skip to content

Azure Kubernetes Cluster (AKS) Nodes Don't Limit the Maximum Pods to Greater than 50

Description

Code Example

terraform
resource "azurerm_kubernetes_cluster" "example" {
  name                = "example-aks"
  location            = azurerm_resource_group.example.location
  resource_group_name = azurerm_resource_group.example.name

  default_node_pool {
    name       = "default"
+   max_pods   = 50
  }

  tags = {
    Environment = "dev"
  }
}

# OR For separate node pool

resource "azurerm_kubernetes_cluster_node_pool" "example" {
  name                  = "example"
  kubernetes_cluster_id = azurerm_kubernetes_cluster.example.id
+ max_pods              = 50
}

Remediation

Terraform

  • Resource: azurerm_kubernetes_cluster, azurerm_kubernetes_cluster_node_pool
  • Arguments: max_pods

Rule Details

FieldValue
IDIAC-0675
SeverityLOW
IaC Typearm
FrameworksTerraform,
Checkov IDCKV_AZURE_168

References