Checks whether the CLB instance attached to the API server of an ACK cluster exists based on the latest cluster inspection report. A resource is compliant if the check item does not return a threat. If cluster inspection is not configured, the result is 'Not Applicable'. If no inspection task exists or the latest task is incomplete, the result is 'No Data'.
Risk level
Default risk level: High.
You can change the risk level as needed.
Detection logic
-
A resource is compliant if the 'The CLB instance attached to the API server does not exist' check item does not return a threat during an ACK cluster inspection. The rule evaluates based on the latest inspection report. If cluster inspection is not configured, the result is 'Not Applicable'. If no inspection task exists or the latest task is incomplete, the result is 'No Data'.
Rule details
|
Parameter |
Description |
|
Rule name |
The CLB instance attached to the API server of an ACK cluster exists |
|
Rule identifier |
|
|
Tag |
ACK |
|
Automatic remediation |
Not supported |
|
Rule trigger |
Configuration changes |
|
Supported resource types |
ACS::ACK::Cluster |
|
Rule parameters |
None |
Remediation
To remediate a non-compliant resource, see Use cluster inspection.