yexinru/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
Files
fix_python
doc-exports/docs/hss/umn/hss_01_0398.html
qiaoli 8ac860f1c4 HSS UMN 20240730 version 
Reviewed-by: Rogal, Marcel <mrogal@noreply.gitea.eco.tsi-dev.otc-service.com>
Co-authored-by: qiaoli <qiaoli@huawei.com>
Co-committed-by: qiaoli <qiaoli@huawei.com>
2024-12-19 12:07:54 +00:00

5.3 KiB
Raw Permalink Blame History

Enabling Container Security Protection

You can enable the container security edition for your containers.

To enable protection for a container node, you need to allocate a quota to the node. If the protection is disabled or the node is deleted, the quota can be allocated to another node.

Check Frequency

HSS performs a full check in the early morning every day.

After you enable server protection, you can view scan results after the automatic scan at 04:10 in the next morning.

Prerequisite

  • On the Container Nodes tab of the Asset Management > Containers & Quota page, the Agent Status of a server is Online, and the Protection Status of the server is Unprotected.
  • You have created a node on CCE.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner of the page, select a region, and choose Security > Host Security Service. The HSS page is displayed.
  3. In the navigation pane, choose Asset Management > Containers & Quota.

    Figure 1 Accessing the container node management page

  4. Enable protection for one or multiple servers.

    • Enabling protection for a server
      1. In the Operation column of a server, click Enable Protection.
      2. In the dialog box that is displayed, confirm the information.

        A container security quota protects one cluster node.

      3. Confirm the information and click OK. If the Protection Status in the container list changes to Protected, it indicates the protection has been enabled.
    • Enabling protection in batches
      1. In the node list, select servers, and click Enable Protection above the list.
      2. In the dialog box that is displayed, confirm the information.

        A container security quota protects one cluster node.

      3. Confirm the information and click OK. If the Protection Status in the container list changes to Protected, it indicates the protection has been enabled.

Parent topic: Container Management