Guide to the Secure Configuration of Red Hat OpenShift Container Platform 4
Rules, Groups, and Values defined within the XCCDF Benchmark
-
Ensure TLS v1.2 is minimum for Openshift Router
Verify tls version for the Openshift Router.Rule Medium Severity -
This is a helper rule to fetch the required api resource for detecting HyperShift OCP version
no descriptionRule Medium Severity -
This is a helper rule to fetch the required api resource for detecting OCP version
no descriptionRule Medium Severity -
Kubernetes Kubelet Settings
The Kubernetes Kubelet is an agent that runs on each node in the cluster. It makes sure that containers are running in a pod. The kubelet takes a ...Group -
Configure Kubelet Event Limit
Maximum event creations per second.Value -
kubelet - Authorization Options
ABAC - Attribute-Based Access Control (ABAC) mode allows you to configure policies using local files. <br>RBAC - Role-based access control (RBAC) m...Value -
Configure Kubelet EvictionHard Image FS Available
Image FS Available for the EvictionHard threshold to trigger.Value -
Configure Kubelet EvictionHard Image FS inodes Free
Image FS inodes Free for the EvictionHard threshold to trigger.Value -
Configure Kubelet EvictionHard Memory Available
Memory Available for the EvictionHard threshold to trigger.Value -
Configure Kubelet EvictionHard NodeFS Available
Node FS Available for the EvictionHard threshold to trigger.Value
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.