Created rules for control BSI APP4.4.A11

sig-bsi-grundschutz · Dec 18, 2023 · 7cbc42d · 7cbc42d
1 parent 30f8cfa
commit 7cbc42d
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/controls/bsi_app_4_4.yml b/controls/bsi_app_4_4.yml
@@ -207,8 +207,12 @@ controls:
       appropriate for the service running in the pod. Based on these checks, Kubernetes SHOULD
       delete or restart the pods.
     notes: >-
-      TBD
-    status: pending
+      The existance of readiness und liveness probes can be validated technically. This check needs
+      to be performed for each container in every pod individually. Therefore, the check is better 
+      suited as part of the Kubernetes admission control process or manually.
+      The adequacy of the checks and the configured time periods needs to be ensured by the 
+      application owner.
+    status: manual
     rules: []
 
   - id: APP.4.4.A12