Security

Introduction

OpenShift is often described as being “secure by default”. In this section, you will explore some of the reasons behind that designation.

Security Domains in OCP

RHACS

SC & SCCs

Security Contexts and Security Context Constraints

• See the lab & course

DAST/SAST/Image Scanning

• See the lab & course

Compliance in OCP

There are a number of aspects to OCP focused around Compliance, from default configurations, ACS add-ons, and optional integrations. One example is the OpenShift Compliance Operator, based on OpenSCAP.

• A Guide to OpenShift Compliance Operator Best Practices
• Your Guide to security hardening OpenShift using the compliance operator

References

• DevSecOps is the Way: Monthly OpenShift Security Series