Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-6708

Remove kubeletConfig evictionHard imagefs.inodesFree and evictionSoft parameters from rules to check the kubelet default values

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Normal
    • None
    • 4.12
    • Compliance Operator
    • None
    • ?
    • Low
    • 5
    • CMP Sprint 59
    • 1
    • False
    • Hide

      None

      Show
      None
    • Hide
      Added support for default values to help guide users in setting:

      "ocp4-cis-kubelet-enable-streaming-connections"
      "ocp4-cis-kubelet-eviction-thresholds-set-hard-imagefs-available"
      "ocp4-cis-kubelet-eviction-thresholds-set-hard-imagefs-inodesfree"
      "ocp4-cis-kubelet-eviction-thresholds-set-hard-memory-available"
      "ocp4-cis-kubelet-eviction-thresholds-set-hard-nodefs-available"
      Show
      Added support for default values to help guide users in setting: "ocp4-cis-kubelet-enable-streaming-connections" "ocp4-cis-kubelet-eviction-thresholds-set-hard-imagefs-available" "ocp4-cis-kubelet-eviction-thresholds-set-hard-imagefs-inodesfree" "ocp4-cis-kubelet-eviction-thresholds-set-hard-memory-available" "ocp4-cis-kubelet-eviction-thresholds-set-hard-nodefs-available"
    • Bug Fix

    Description

      Description of problem:

      
      the rule kubelet-eviction-thresholds-set-hard-imagefs-inodesfree is checking for this kubelet configuration parameter:
      
      "evictionHard": {
          "imagefs.inodesFree"
       }
      
      But this parameter does not exist at all in the documentation of kubelet configuration parameters:
      
      https://kubernetes.io/docs/reference/config-api/kubelet-config.v1beta1/
      
      So, the rule should be removed.
      
      Same has to be done with all the evictionsoft parameters except for memory.available
      
      

      Version-Release number of selected component (if applicable):

      
      Compliance Operator v0.1.59
      
      

      Additional info:

      
      evictionhard seems to be already fixed upstream in:
      
      https://github.com/ComplianceAsCode/content/pull/9993
      
      

      Attachments

        Activity

          People

            wenshen@redhat.com Vincent Shen
            rhn-support-gparente German Parente
            Xiaojie Yuan Xiaojie Yuan
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: