Evaluates whether each Container Service for Kubernetes (ACK) cluster has a container security policy enabled and configured.
Scenario
Container security policies help enterprise O&M engineers enforce policy governance across ACK clusters.
Risk level
Default risk level: medium.
You can change the risk level when you apply this rule.
Compliance evaluation logic
An ACK cluster is evaluated as compliant if it has a container security policy enabled and configured.
Rule details
|
Item |
Description |
|
Rule name |
ack-cluster-has-policy-check |
|
Rule ID |
|
|
Tag |
ACK and Cluster |
|
Automatic remediation |
Not supported |
|
Trigger type |
Periodic execution |
|
Evaluation frequency |
Every 24 hours |
|
Supported resource type |
ACS::ACK::Cluster |
|
Input parameter |
None |
Non-compliance remediation
Enable and configure a container security policy for all ACK clusters. For more information, see Configure and enforce ACK pod security policies.