Red Hat OpenShift
TMA-OPENSHIFT-1.2.20
Ensure that the maximumRetainedFiles argument is set to 10 or as appropriate
SedangLevel 1Tinjauan manualopenshift
Deskripsi
Retain 10 or an appropriate number of old log files. The benchmark marks this recommendation Manual.
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
OpenShift audit works at the API server level, logging all requests coming to the server. Run the following command to verify the number of retained log files: oc get configmap config -n openshift-kube-apiserver -ojson | jq -r '.data["config.yaml"]' | jq -r '.apiServerArguments["audit-log-maxbackup"][]?' Verify the output is at least 10.
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Set maximumRetainedFiles argument to 10
Properti
- Sistem operasi
- Apa saja
- Tag
- openshiftapi-server
- Referensi
- CIS Red Hat OpenShift Container Platform Benchmark v2.0.0 - 1.2.20 Ensure that the maximumRetainedFiles argument is set to 10 or as appropriate