Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Older Universal Control Plane (MKE) and Docker Trusted Registry (DTR) images must be removed from all cluster nodes upon upgrading.
Description
Discussion Text
When upgrading either the UCP or DTR components of MKE, the newer images are pulled (or unpacked if offline) onto engine nodes in a cluster. Once the upgrade is complete, one must manually remove all old image version from the cluster nodes to meet the requirements of this control.
When upgrading the Docker Engine - Enterprise component of MKE, the old package version is automatically replaced.
When upgrading the Docker Engine - Enterprise component of MKE, the old package version is automatically replaced.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.