Fix CIS vuln (IBM#3)

* Update redis-master-deployment.yaml

* Update redis-slave-deployment.yaml

* Update guestbook-deployment.yaml

* Create .cveignore

.cra/.cveignore

@@ -0,0 +1,17 @@
+[
+{
+    "cve": "CVE-2020-28469",
+    "expiration": "2021-08-31T22:08:41+04:00",
+    "comment": "glo-parent. Fixed in Version:  5.1.2 . Dependendecy for Reacts-scripts. waiting for upstream fix "
+},
+{
+    "cve": "CVE-2021-23337",
+    "expiration": "2021-08-31T22:08:41+04:00",
+    "comment": "Lodash.  Dependendecy for Reacts-scripts. waiting for upstream fix"
+},
+{
+    "cve": "CVE-2020-28500",
+    "expiration": "2021-08-31T22:08:41+04:00",
+    "comment": "Lodash.  Dependendecy for Reacts-scripts. waiting for upstream fix"
+}
+]

guestbook-deployment.yaml

@@ -19,6 +19,13 @@ spec:
       containers:
       - name: guestbook
         image: ibmcom/guestbook:v1
+        resources:
+          limits:
+            memory: 32Mi
+            cpu: 125m
+          requests:
+            memory: 32Mi
+            cpu: 125m
         ports:
         - name: http-server
           containerPort: 3000
@@ -35,4 +42,4 @@ spec:
     targetPort: http-server
   selector:
     app: guestbook
-  type: LoadBalancer
+  type: LoadBalancer

redis-master-deployment.yaml

@@ -20,6 +20,13 @@ spec:
       containers:
       - name: redis-master
         image: redis:3.2.9
+        resources:
+          limits:
+            memory: 32Mi
+            cpu: 125m
+          requests:
+            memory: 32Mi
+            cpu: 125m
         ports:
         - name: redis-server
           containerPort: 6379

redis-slave-deployment.yaml

@@ -20,6 +20,13 @@ spec:
       containers:
       - name: redis-slave
         image: ibmcom/guestbook-redis-slave:v2
+        resources:
+          limits:
+            memory: 32Mi
+            cpu: 125m
+          requests:
+            memory: 32Mi
+            cpu: 125m
         ports:
         - name: redis-server
           containerPort: 6379