VUM is reporting that a cluster is compliant with the baseline. But upon checking ESXi hosts, they are at another patch level. There are other hosts that also are showing the opposite of this scenario where the hosts are at the compliant level, but VUM is showing non-compliant.
The issue occurs due to long-running tasks and the VUM automatic restart taking longer after VPXD restart. This has been fixed in 9.0 GA.
Option 1 (set the parameter - preserves SDRS functionality)
Review How to set PercentIdleMBInSpaceDemand in vCenter
Option 2 (disable SDRS - simpler but loses SDRS benefits).
Enabling and disabling Storage DRS (SDRS) in the vSphere Client