TF 0271 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Ensure that the --terminated-pod-gc-threshold argument is set as appropriate

Property Value
Language terraform
Severity low

Description

The Kubernetes Controller Manager is missing the --terminated-pod-gc-threshold argument, which controls the automatic cleanup of terminated pods. Without this setting, old pod resources may accumulate unnecessarily.

Impact

Failure to set an appropriate threshold can lead to resource exhaustion on the control plane due to excessive terminated pods, potentially degrading cluster performance and stability, and increasing management overhead.

Resolution

Edit the Controller Manager pod specification file /etc/kubernetes/manifests/kube-controller-manager.yaml on the Control Plane node and set the --terminated-pod-gc-threshold to an appropriate threshold.