![]() az aks update -g myResourceGroup -n myManagedCluster \ az aks create -g myResourceGroup -n myManagedCluster \Įnable Image Cleaner on an existing clusterĮnable Image Cleaner on an existing AKS cluster using the az aks update command. Enable Image Cleaner on your AKS cluster Enable Image Cleaner on a new clusterĮnable Image Cleaner on a new AKS cluster using the az aks create command with the -enable-image-cleaner parameter. This means if you enable the feature again without explicitly passing configuration, the existing value is used instead of the default. Not required for Azure CLI, required for ARM template or other clientsĪfter disabling Image Cleaner, the old configuration still exists. ![]() The default value for Azure CLI is one week, the minimum value is 24 hours and the maximum is three months. This parameter determines the interval time (in hours) Image Cleaner uses to run. With Image Cleaner, you can choose between manual and automatic mode and the following configuration options: NameĮnable the Image Cleaner feature for an AKS clusterĭisable the Image Cleaner feature for an AKS cluster Once Image Cleaner generates an ImageList, it removes all images in the list from node VMs. Image Cleaner automatically generates an updated ImageList based on a set time interval and can also be supplied manually. A trivy scan helps determine vulnerability and flags images with a classification of LOW, MEDIUM, HIGH, or CRITICAL. The eraser pods running on each node clean up any unreferenced and vulnerable images according to the ImageList. ![]() When you enable Image Cleaner, it deploys an eraser-controller-manager pod, which generates an ImageList CRD. Image Cleaner doesn't yet support Windows node pools or AKS virtual nodes. If you need to install or upgrade, see Install Azure CLI. ![]() If you don't have an Azure subscription, you can create a free account. On an AKS cluster, the feature name and property name is Image Cleaner, while the relevant Image Cleaner pods' names contain Eraser. Image Cleaner is a feature based on Eraser. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |