added fedramp sec config guide#115022
Conversation
openshift-ci
Bot
added
the
size/L
|
🤖 Thu Jul 09 19:52:29 - Prow CI generated the docs preview: |
|
|
||
| The guidance you receive addresses the SCG-CSO-RSC (Cloud Service Offering - Recommended Secure Configuration) requirement, including both cluster-wide top-level administrative accounts and namespace-scoped privileged accounts. The parameters in both administrative and privilege accounts help you deploy, operate, decommission, and secure access among your configurations. | ||
|
|
||
| For the most up-to-date account features and structural prerequisites, review the official Red{nbsp}Hat {OCP-short} documentation page for your active deployment service. Your browser must have JavaScript enabled to access and interact with the documentation portal for link:https://docs.redhat.com/en/documentation/openshift_container_platform/4.22[Red Hat OpenShift Container Platform]. |
There was a problem hiding this comment.
🤖 [error] OpenShiftAsciiDoc.SuggestAttribute: Use the AsciiDoc attribute '{product-title}' rather than the plain text product term 'OpenShift Container Platform', unless your use case is an exception.
| |Namespace administrators access localized application logs and metrics within assigned boundaries, preventing cross-namespace data visibility. | ||
| |`oc logs <pod-name> -n <namespace>` | ||
|
|
||
| |Review installed operators |
There was a problem hiding this comment.
🤖 [error] Vale.Terms: Use 'Operators?' instead of 'operators'.
| |`oc logs <pod-name> -n <namespace>` | ||
|
|
||
| |Review installed operators | ||
| |Inspect local, namespace-scoped operators running within the project from OperatorHub, verifying their management permissions are constrained strictly to that namespace. |
There was a problem hiding this comment.
🤖 [error] Vale.Terms: Use 'Operators?' instead of 'operators'.
|
|
||
| |SCG-ENH-MRG (Machine-Readable Guidance) | ||
| |Machine-Readable Guidance: Providers should also give the SCG in machine-readable format that automated compliance processes can ingest. | ||
| |Generates machine-parsable compliance assessment artifacts conforming to Open Security Controls Assessment Language (OSCAL) schema standards through the compliance operator. |
There was a problem hiding this comment.
🤖 [error] Vale.Terms: Use 'Operators?' instead of 'operator'.
jldohmann
left a comment
jldohmann
left a comment
There was a problem hiding this comment.
just a question real quick before merging this CP. also, i tried checking the preview and was unable to view the ROSA classic preview docs
jc-berger
force-pushed
the
manual-cherry-pick-113973-4.21
branch
2 times, most recently
from
a93acc0 to
2bbeb4f
Compare
(cherry picked from commit 0a1f054)
jc-berger
force-pushed
the
manual-cherry-pick-113973-4.21
branch
from
3bd3ca3 to
1a8523c
Compare
|
@jc-berger: all tests passed! Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
4 participants
Version(s):
4.21
Issue:
See the PR that had issues merging into 4.21, hence, I made this PR to cherry pick the content changes into 4.21: https://github.com/openshift/openshift-docs/pull/113973/changes
Link to docs preview:
QE review:
Additional information: