DISA STIG for Red Hat OpenShift Container Platform 4 - Platform level
Rules and Groups employed by this XCCDF Profile
-
Ensure that the OpenShift OAuth provider selection is set
Custom login pages can be helpful to show users a branded page that they trust and expect before being redirected to the authentication provider. <...Rule Medium Severity -
Ensure that the OpenShift MOTD is set
To configure OpenShift's MOTD, create a <b>ConfigMap</b> called <code>motd</code> in the <code>openshift</code> namespace. The object should look ...Rule Medium Severity -
Ensure that project templates autocreate Resource Quotas
<p> Configure a template for newly created projects to use default resource quotas and make sure this template is referenced from th...Rule Medium Severity -
Ensure workloads use resource requests and limits per namespace
There are two ways to enable resource requests and limits. To create either: A multi-project quota, defined by a ClusterResourceQuota object, all...Rule Medium Severity -
This is a helper rule to fetch the required api resource for detecting HyperShift OCP version
no descriptionRule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.
Capacity
Modules