Ensure that Compliance Operator is scanning the cluster
An XCCDF Rule
Description
The Compliance Operator scans the hosts and the platform (OCP) configurations for software flaws and improper configurations according to different compliance benchmarks. It uses OpenSCAP as a backend, which is a known and certified tool to do such scans.
warning alert: Warning
This rule's check operates on the cluster configuration dump.
Therefore, you need to use a tool that can query the OCP API, retrieve the
/apis/compliance.openshift.io/v1alpha1/scansettingbindings?limit=5 API endpoint to the local Rationale
Vulnerability scanning and risk management are important detective controls for all systems, to detect potential flaws and unauthorised access.
- ID
- xccdf_org.ssgproject.content_rule_scansettingbinding_exists
- Severity
- Medium
- References
- Updated