Uploaded image for project: 'Cloud Infrastructure Security & Compliance'
  1. Cloud Infrastructure Security & Compliance
  2. CMP-2398

ocp4-cis-api-server-insecure-port rule failing on OCP 4.14 version

XMLWordPrintable

    • False
    • None
    • False

      As per the [KB Article|https://access.redhat.com/solutions/7002547] the insecure-port is removed in 4.10 version and above, so How to remediate this rule which is failing in RHOCP 4.14

      NAME                                                                                                                        STATUS   SEVERITY
compliancecheckresult.compliance.openshift.io/ocp4-cis-api-server-insecure-port                                             FAIL     medium
###############################################################
$ oc get configmap config -n openshift-kube-apiserver -ojson | jq -r '.data["config.yaml"]' | jq '.apiServerArguments["insecure-port"]'
null

        1. compliance_data (2).txt
          501 kB
        2. scan-comm (1).txt
          32 kB

            lbragsta@redhat.com Lance Bragstad
            rhn-support-shaising Shailendra Singh
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

              Created:
              Updated: