Ensure that the etcd data directory ownership is set to root:root

YüksekDüzey 1Manuel incelemeopenshift

Açıklama

Ensure that the etcd data directory ownership is set to root:root. The benchmark marks this recommendation Manual.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

In OpenShift 4, etcd members are deployed on the master nodes as static pods. The etcd database is stored on the master nodes in /var/lib/etcd and mounted to the etcd-member container via the host path mount data-dir with the same filesystem path (/var/lib/etcd). The ownership for this directory on the etcd-member container and on the container host is root:root. Starting with OCP 4.4, etcd is managed by the cluster-etcd-operator. The etcd operator will help to automate restoration of master nodes. There is also a new etcdctl container in the etcd static pod for quick debugging.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Execute the chown command to remediate ownership and set it file ownership to root:root.

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: openshiftcontrol-planeetcdfile-permissions
Referans: CIS Red Hat OpenShift Container Platform Benchmark v2.0.0 - 1.1.12 Ensure that the etcd data directory ownership is set to root:root