Activate Garbage collection in OpenShift Container Platform 4, as appropriate

低级别 1人工审核openshift

说明

Configure garbage collection for containers and images as appropriate The benchmark marks this recommendation Manual.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Two types of garbage collection are performed on an OpenShift Container Platform node: • Container garbage collection: Removes terminated containers. • Image garbage collection: Removes images not referenced by any running pods. Container garbage collection can be performed using eviction thresholds. Image garbage collection relies on disk usage as reported by cAdvisor on the node to decide which images to remove from the node.

修复方式

修复方法: 操作指南或基础设施补丁

To configure, follow the directions in Garbage Collection Remediation

属性

操作系统: 任意
标签: openshiftworker-node
参考: CIS Red Hat OpenShift Container Platform Benchmark v2.0.0 - 4.2.1 Activate Garbage collection in OpenShift Container Platform 4, as appropriate