FINOS Compliance Policy/Benchmark for the Compliance Operator

1. Proposed title of this feature request

FINOS Compliant Financial Infrastructure compliance benchmark

1. What is the nature and description of the request?

We are working with the FINOS Compliant Financial Infrastructure team to create a CFI deployment of OpenShift - https://github.com/finos/compliant-financial-infrastructure.

The first part of the engagement was to create a "service accelerator" which describes the configuration that needs to be applied to OCP to make in CFI Compliant. https://github.com/finos/compliant-financial-infrastructure/blob/dev/accelerators/kubernetes/ocp/sat_rh_ocp.adoc

We would like to have these configurations included in an Compliance Operator benchmark so that we can automate the monitoring and automation.

With the support of knewcome@redhat.com we worked with jhrozek.jirabot@redhat.com who created an a POC policy https://github.com/jhrozek/content/commit/5700c39d38c51aad7940106cbd2159cfd8633499

Opening this RFE so that above can be included on OCP Compliance Operator. 

We continue to work with the FINOS CFI project and over coming weeks we will be iterating on the service accelerator which will result in additional configurations / policies being added and therefore additional rules needing to be added to the benchmark.
 

1. Why does the customer need this? (List the business requirements here)

Provide a set of common compliance policies that can be used to implement OCP within Financial Services firms.

4. List any affected packages or components.

Compliance Operator