Red Hat OpenShift
TMA-OPENSHIFT-1.2.31
Ensure unsupported configuration overrides are not used
OrtaDüzey 1Manuel incelemeopenshift
Açıklama
OpenShift supported an option called unsupportedConfigOverrides that allowed users to opt into unsupported behavior. This option is no longer supported by OpenShift and should not be used. The benchmark marks this recommendation Manual.
Nasıl denetlenir
Denetim yöntemi: Manuel inceleme
Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.
Make sure the unsupportedConfigOverrides in your deployment returns null using the following command: oc get kubeapiserver/cluster -o jsonpath='{.spec.unsupportedConfigOverrides}' The output should return null. Any other return value is a finding and you should migrate away from that particular configuration.
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
set this value to null
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- openshiftapi-server
- Referans
- CIS Red Hat OpenShift Container Platform Benchmark v2.0.0 - 1.2.31 Ensure unsupported configuration overrides are not used