Guide to the Secure Configuration of Red Hat OpenShift Container Platform 4
Rules, Groups, and Values defined within the XCCDF Benchmark
-
This is a helper rule to fetch the required api resource for detecting HyperShift OCP version
no descriptionRule Medium Severity -
This is a helper rule to fetch the required api resource for detecting OCP version
no descriptionRule Medium Severity -
Kubernetes Kubelet Settings
The Kubernetes Kubelet is an agent that runs on each node in the cluster. It makes sure that containers are running in a pod. The kubelet takes a set of PodSpecs that are provided through various ...Group -
Configure Kubelet Event Limit
Maximum event creations per second.Value -
Configure Kubelet EvictionHard Image FS Available
Image FS Available for the EvictionHard threshold to trigger.Value -
Configure Kubelet EvictionHard Image FS inodes Free
Image FS inodes Free for the EvictionHard threshold to trigger.Value -
Configure Kubelet EvictionHard Memory Available
Memory Available for the EvictionHard threshold to trigger.Value -
Configure Kubelet EvictionHard NodeFS Available
Node FS Available for the EvictionHard threshold to trigger.Value -
Configure Kubelet EvictionHard Node FS inodes Free
Node FS inodes Free for the EvictionHard threshold to trigger.Value -
Configure Kubelet EvictionSoft Image FS Available
Image FS Available for the EvictionSoft threshold to trigger.Value
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.