SYS.1.6.A22

[sluetze]

No description provided.

[sluetze]

In order to have containers available for later investigation if necessary, an image of the state SHOULD be created according to defined rules.

The OpenShift container runtime environment used does not provide a function for creating a memory image of a running container. The running containers can be listed and different parameters can be queried and saved for them. Further data (such as running processes) can be queried via the host. Using the operating system, memory dumps (core dump) or file system data (ephemeral and persistent) can also be backed up. The memory dumps can also be created with third-party operators [CoreDump].

[benruland]

I would argue to assess this control partial. Some functionality is inherently provided by OpenShift (and linux), others is missing.

The notes pretty much sum up the current state. To fully adress the the requirement (automatic creation of "state images" according to rules", we would imho need a 3rd party solution.

[benruland]

PR: ComplianceAsCode#12470