Ensure Cluster Check triggered at least once per week for Kubernetes Clusters

보통레벨 1수동 검토alibaba

설명

Kubernetes Engine's cluster check feature helps you verify the system nodes and components healthy status. When you trigger the checking, the process would check on the health state of each node in your cluster and also the cluster configuration as kubelet\docker daemon\kernel and network iptables configuration, if ... Kubernetes Engine uses the node's health status to determine if a node needs to be repaired. A node reporting a Ready status is considered healthy. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Using the management console: 1. Logon to ACK console 2. Select the target cluster and open the More pop-menu for advance options on cluster. 3. Select Overview page on left column and check if the Last check status is Normal. 4. Verify the checking time and details in Global Check.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Using the management console: 1. Logon to ACK console 2. Select the target cluster and open the More pop-menu for advance options on cluster 3. Select Global Check and click the Start button to trigger the checking

속성

운영 체제: 모두
태그: alibabaack
참고 자료: CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 7.4 Ensure Cluster Check triggered at least once per week for Kubernetes Clusters