Skip to content
ATO Pathways
  Log In

DISA STIG for Red Hat OpenShift Container Platform 4 - Platform level

Rules and Groups employed by this XCCDF Profile

  • Ensure that the OpenShift OAuth provider selection is set

    Custom login pages can be helpful to show users a branded page that they trust and expect before being redirected to the authentication provider. <...
    Rule Medium Severity
    Show

  • Ensure that the OpenShift MOTD is set

    To configure OpenShift's MOTD, create a <b>ConfigMap</b> called <code>motd</code> in the <code>openshift</code> namespace. The object should look ...
    Rule Medium Severity
    Show

  • Ensure that project templates autocreate Resource Quotas

    <p> Configure a template for newly created projects to use default resource quotas and make sure this template is referenced from th...
    Rule Medium Severity
    Show

  • Ensure workloads use resource requests and limits per namespace

    There are two ways to enable resource requests and limits. To create either: A multi-project quota, defined by a ClusterResourceQuota object, all...
    Rule Medium Severity
    Show

  • This is a helper rule to fetch the required api resource for detecting HyperShift OCP version

    no description
    Rule Medium Severity
    Show

  • This is a helper rule to fetch the required api resource for detecting OCP version

    no description
    Rule Medium Severity
    Show

  • Kubernetes Kubelet Settings

    The Kubernetes Kubelet is an agent that runs on each node in the cluster. It makes sure that containers are running in a pod. The kubelet takes a ...
    Group
    Show

  • kubelet - Disable the Read-Only Port

    To disable the read-only port, edit the kubelet configuration Edit the <code>openshift-kube-apiserver</code> configmap and set the <code>kubelet-re...
    Rule Medium Severity
    Show

  • OpenShift - Logging Settings

    Contains evaluations for the cluster's logging configuration settings.
    Group
    Show

  • Ensure that Audit Log Errors Emit Alerts

    <p> OpenShift audit works at the API server level, logging all requests coming to the server. However, if API server instance is unable to write er...
    Rule High Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules