Activate Garbage collection in OpenShift Container Platform 4, as appropriate

低レベル 1手動レビューopenshift

説明

Configure garbage collection for containers and images as appropriate The benchmark marks this recommendation Manual.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Two types of garbage collection are performed on an OpenShift Container Platform node: • Container garbage collection: Removes terminated containers. • Image garbage collection: Removes images not referenced by any running pods. Container garbage collection can be performed using eviction thresholds. Image garbage collection relies on disk usage as reported by cAdvisor on the node to decide which images to remove from the node.

修正方法

修正方法: ガイダンスまたは IaC パッチ

To configure, follow the directions in Garbage Collection Remediation

プロパティ

オペレーティングシステム: すべて
タグ: openshiftworker-node
参照: CIS Red Hat OpenShift Container Platform Benchmark v2.0.0 - 4.2.1 Activate Garbage collection in OpenShift Container Platform 4, as appropriate