Skip to content

WIP: ocp4/CIS 1.3.1: Add rules for eviction thresholds#6545

Closed
JAORMX wants to merge 1 commit intoComplianceAsCode:masterfrom
JAORMX:ocp4-cis-1.3.1
Closed

WIP: ocp4/CIS 1.3.1: Add rules for eviction thresholds#6545
JAORMX wants to merge 1 commit intoComplianceAsCode:masterfrom
JAORMX:ocp4-cis-1.3.1

Conversation

@JAORMX
Copy link
Copy Markdown
Contributor

@JAORMX JAORMX commented Jan 19, 2021

This adds the necessary rules to check for the kubelet eviction
threshold values.

Signed-off-by: Juan Antonio Osorio Robles jaosorior@redhat.com

@JAORMX JAORMX changed the title ocp4/CIS 1.3.1: Add rules for eviction thresholds WIP: ocp4/CIS 1.3.1: Add rules for eviction thresholds Jan 19, 2021
@openshift-ci-robot openshift-ci-robot added the do-not-merge/work-in-progress Used by openshift-ci bot. label Jan 19, 2021
@openscap-ci
Copy link
Copy Markdown
Collaborator

openscap-ci commented Jan 19, 2021

Changes identified:
Profiles:
 cis-node on ocp4

Show details

Profile cis-node on ocp4:
 Rule kubelet_eviction_thresholds_set_soft_memory_available added to cis-node profile.

Recommended tests to execute:
 build_product ocp4
 tests/test_suite.py profile --libvirt qemu:///system test-suite-vm --datastream build/ssg-ocp4-ds.xml cis-node

@JAORMX JAORMX requested review from evgenyz and yuumasato January 19, 2021 08:43
This adds the necessary rules to check for the kubelet eviction
threshold values.

Signed-off-by: Juan Antonio Osorio Robles <jaosorior@redhat.com>
@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented Jan 21, 2021

@JAORMX: The following tests failed, say /retest to rerun all failed tests:

Test name Commit Details Rerun command
ci/prow/e2e-aws-ocp4-moderate c54ede4 link /test e2e-aws-ocp4-moderate
ci/prow/e2e-aws-ocp4-cis c54ede4 link /test e2e-aws-ocp4-cis
ci/prow/e2e-aws-ocp4-cis-node c54ede4 link /test e2e-aws-ocp4-cis-node

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

@ggbecker
Copy link
Copy Markdown
Member

#6563 contains the commit proposed by this PR, @JAORMX you may close this PR

@JAORMX JAORMX closed this Jan 26, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

do-not-merge/work-in-progress Used by openshift-ci bot.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants