Container life cycle management with retention rate adjustment based on detected anomalies

A system, comprising:

• a memory;
• and
• at least one processing device, coupled to the memory, operative to implement the following steps:
• monitoring an execution of one or more containers;
• determining that a given one of the one or more containers exhibits anomalous behavior;
• and
• in response to the determining, adjusting a retention time specifying a configured lifespan of the given container exhibiting anomalous behavior to an interval between deployment of the given container and the time of the determining, using at least one processing device, wherein the retention time of the given container exhibiting anomalous behavior determines when the given container is one or more of terminated and changes role to a honeypot container.

A computer program product, comprising a tangible machine-readable storage medium having encoded therein executable code of one or more software programs, wherein the one or more software programs when executed by at least one processing device perform the following steps:

• monitoring an execution of one or more containers;
• determining that a given one of the one or more containers exhibits anomalous behavior;
• and
• in response to the determining, adjusting a retention time specifying a configured lifespan of the given container exhibiting anomalous behavior to an interval between deployment of the given container and the time of the determining, using at least one processing device, wherein the retention time of the given container exhibiting anomalous behavior determines when the given container is one or more of terminated and changes role to a honeypot container.