Cloud Config:PolarDB clusters with stable kernel versions

Scenarios

Use the latest or a stable database kernel version to ensure business continuity.

Risk level

Default risk level: high.

You can change the risk level when you apply this rule.

Compliance evaluation logic

Checks whether PolarDB cluster kernel versions appear in the version list specified by the parameter. Clusters whose kernel version is not on the list are evaluated as Compliant. By default, the parameter specifies a list of kernel versions with potential stability risks. This rule does not apply to a MySQL database.

Rule details

Parameter	Description
Rule Template Name	polardb-revision-version-used-check
Rule Template Identifier	polardb-revision-version-used-check
Tag	PolarDB
Automatic remediation	Not supported
Invoke Type	Periodic execution
Evaluation frequency	Every 24 hours
Supported resource type	ACS::PolarDB::DBCluster
Input parameter	Parameter name: blackRevisionVersionList. Default: 5.6.1.0.39,5.7.1.0.29,5.7.1.0.28.4,5.7.1.0.28.3,5.7.1.0.28,5.7.1.0.28.2,8.0.1.1.38.1, 8.0.1.1.1.38, 8.0.1.1.37,8.0.1.1.36.3,8.0.1.1.36.1, 8.0.2.1.1.35.1, 8.0.2.2.2.2.1.13.2.8.2.1.1.13, 8.2.2.8.2.2.2.2.2.2.2.2.1.8.0.8.0.2.1.1.1.1.2.1.1.1.1.1.1.1.1.1..

Non-compliance remediation

Use a stable database kernel version. Minor version update.