Control: 7.4 Ensure Cluster Check triggered at least once per week for Kubernetes Clusters
Description
Kubernetes Engine's cluster check feature helps you verify the system nodes and components healthy status. When you trigger the checking, the process would check on the health state of each node in your cluster and also the cluster configuration as kubelet\docker daemon\kernel and network iptables configuration, if there are fails consecutive health checks, the diagnose would report to admin for further repair.
Remediation
From Console
- Logon to ACK console.
- Select the target cluster and open the
Morepop-menu for advance options on cluster. - Select
Global Checkand click theStartbutton to trigger the checking.
Usage
Run the control in your terminal:
powerpipe control run alicloud_compliance.control.cis_v100_7_4Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run alicloud_compliance.control.cis_v100_7_4 --shareSQL
This control uses a named query:
select 'arn:acs:::' || account_id as resource, 'info' as status, 'Manual verification required.' as reason , account_id as account_idfrom alicloud_account;