Red Hat OpenShift
TMA-OPENSHIFT-1.2.20
Ensure that the maximumRetainedFiles argument is set to 10 or as appropriate
MediumLevel 1Manual reviewopenshift
Description
Retain 10 or an appropriate number of old log files. The benchmark marks this recommendation Manual.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
OpenShift audit works at the API server level, logging all requests coming to the server. Run the following command to verify the number of retained log files: oc get configmap config -n openshift-kube-apiserver -ojson | jq -r '.data["config.yaml"]' | jq -r '.apiServerArguments["audit-log-maxbackup"][]?' Verify the output is at least 10.
How it is fixed
Fix method: Guidance or infrastructure patch
Set maximumRetainedFiles argument to 10
Properties
- Operating systems
- Any
- Tags
- openshiftapi-server
- Reference
- CIS Red Hat OpenShift Container Platform Benchmark v2.0.0 - 1.2.20 Ensure that the maximumRetainedFiles argument is set to 10 or as appropriate