Disable overcommitting guest memory

СредњаНиво 1Ручни прегледopenshift-virt

Опис

The overcommitGuestOverhead configuration option enables the request for additional virtual machine management memory inside the virt - launcher pod. The overcommit feature is used to increase virtual machine density on the node, as long as the virtual machine doesn’t request all the memory that it would need if fully loaded. However, if the VM were to use all of the memory it could, this would lead to the OpenShift Scheduler killing the workload. The benchmark marks this recommendation Manual; TMAegis reports it as a manual review item with the audit steps.

Како се проверава

Метод провере: Ручни преглед

Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.

Verify that no virtual machines are using the overcommitGuestOverhead setting: $ oc get vm - ojson - A |jq '.items[] | select(.spec.template.spec.domain.resources.overcommitGuestOverhead == true)| .metadata.namespace + "/" + .metadata.name'

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

Stop any guest with this flag enabled and remove the flag before restarting. This flag can be removed on a given VM with the following command: $ oc patch vm <vm-name> --type='json' -p='[ {"op": "remove", "path": "/spec/template/spec/domain/resources/overcommitGuestOverhead"}, ]'

Својства

Оперативни системи: Било који
Ознаке: openshift-virtmanual-review
Референца: CIS Red Hat OpenShift Virtual Machine Extension Benchmark v1.0.0 - 2.2 Disable overcommitting guest memory