Ensure Cluster Check triggered at least once per week for Kubernetes Clusters

MédiaNível 1Revisão manualalibaba

Descrição

Kubernetes Engine's cluster check feature helps you verify the system nodes and components healthy status. When you trigger the checking, the process would check on the health state of each node in your cluster and also the cluster configuration as kubelet\docker daemon\kernel and network iptables configuration, if ... Kubernetes Engine uses the node's health status to determine if a node needs to be repaired. A node reporting a Ready status is considered healthy. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.

Como é verificado

Método de auditoria: Revisão manual

Esta recomendação não pode ser verificada automaticamente. Uma varredura a lista com estas instruções quando você passa --include-manual.

Using the management console: 1. Logon to ACK console 2. Select the target cluster and open the More pop-menu for advance options on cluster. 3. Select Overview page on left column and check if the Last check status is Normal. 4. Verify the checking time and details in Global Check.

Como é corrigido

Método de correção: Orientação ou patch de infraestrutura

Using the management console: 1. Logon to ACK console 2. Select the target cluster and open the More pop-menu for advance options on cluster 3. Select Global Check and click the Start button to trigger the checking

Propriedades

Sistemas operacionais: Qualquer
Tags: alibabaack
Referência: CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 7.4 Ensure Cluster Check triggered at least once per week for Kubernetes Clusters