Skip to content

Commit d646b4a

Browse files
author
Agil Antony
committed
ROX27682 Adding updates to Compliance reporting documentation
ROX27682 Small change ROX27682 Review comments ROX27682 Review comments ROX27682 Review comments ROX27682 Review comments
1 parent 7f86cfb commit d646b4a

14 files changed

+128
-123
lines changed

_topic_maps/_topic_map.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -208,7 +208,7 @@ Topics:
208208
File: compliance-feature-overview
209209
- Name: Monitoring workload and cluster compliance
210210
File: monitoring-workload-and-cluster-compliance
211-
- Name: Scheduling compliance scans and assessing profile compliance (Technology preview)
211+
- Name: Scheduling compliance scans and assessing profile compliance
212212
File: scheduling-compliance-scans-and-assessing-profile-compliance
213213
- Name: Evaluating security risks
214214
File: evaluate-security-risks

modules/all-report-jobs-tab.adoc

Lines changed: 11 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -10,33 +10,18 @@ The *All report jobs* tab shows the current status and requester for each report
1010

1111
The report jobs are organized into the following groups:
1212

13-
* *Completed*: Indicates which report jobs have been finished.
14-
* *Status*: Displays the current state of each report job.
13+
Completed:: Indicates which report jobs have been finished.
14+
Status:: Displays the current state of each report job.
1515
+
1616
The following values are associated with the report job status:
1717
+
18-
** `Waiting`
19-
+
20-
The report job is in the queue.
21-
22-
** `Preparing`
23-
+
24-
The report job is being processed.
25-
26-
** `Ready for download`
27-
+
28-
The report is ready and available for download.
29-
30-
** `Successfully sent`
31-
+
32-
The report has been successfully emailed.
33-
34-
** `Error`
35-
+
36-
There was an issue with the report job.
37-
38-
** `None`
39-
+
40-
No recent jobs are available.
18+
`Waiting`::: The report job is in the queue.
19+
`Preparing`::: The report job is being processed.
20+
`Report ready for download`::: The report is ready and available for download.
21+
`Partial report ready for download`::: A report is partially complete and ready for download.
22+
`Report successfully sent`::: The report was successfully emailed.
23+
`Partial report successfully sent`::: A report is partially complete and was successfully emailed.
24+
`Report failed to generate`::: There was an issue with the report job. Hover to view the error message.
25+
`None`::: There are no recent jobs available.
4126

42-
* *Requester*: Identifies the user or system account that initiated the report job.
27+
Requester:: Identifies the user or system account that initiated the report job.

modules/analyzing-compliance-scan-schedules.adoc

Lines changed: 13 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -16,16 +16,26 @@ For more information about how to create a compliance scan schedule, see "Custom
1616
1717
.Procedure
1818

19-
. In the {product-title-short} portal, click *Compliance -> Schedules*.
19+
. In the {product-title-short} portal, click *Compliance -> OpenShift Schedules*.
2020
. Optional: To sort the compliance scan schedules in ascending or descending order, select the *Name* column heading.
21-
. Select the compliance scan you created.
21+
. Select the compliance scan that you have created.
2222
. Optional: To sort the cluster health information in ascending or descending order, select a column heading in the *Clusters* section.
2323
. Optional: To view the status of the one or more requested jobs from different users:
2424
.. Click the *All report jobs* tab.
2525
.. You can find the status of the one or more report jobs in the *Status* column.
2626
.. Optional: Choose the appropriate method to re-organize the information in the *All report jobs* section:
2727
*** To sort the jobs in ascending or descending order, select the *Completed* column heading.
28-
*** To filter based on the report run states, select one or more states from the *Filter by report run states* drop-down list.
28+
*** To filter the jobs based on the report run states, select one or more states from the *Filter by report run states* drop-down list.
29+
+
30+
The following values are associated with the report run states:
31+
+
32+
**** `Waiting`
33+
**** `Preparing`
34+
**** `Report ready for download`
35+
**** `Partial report ready for download`
36+
**** `Report successfully sent`
37+
**** `Partial report successfully sent`
38+
**** `Report failed to generate`
2939
*** To view only the jobs that you created, set *View only my jobs* to on.
3040
.. Optional: To view the job details associated with a report job, perform the following steps:
3141
... Locate the report job for which you want to view the job details.

modules/assessing-the-profile-compliance-across-clusters.adoc

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,11 +6,11 @@
66
[id="assessing-the-profile-compliance-across-clusters_{context}"]
77
= Assessing the profile compliance across clusters
88

9-
By viewing the coverage page, you can assess the profile compliance for nodes and platform resources across clusters.
9+
By viewing the *Coverage* page, you can assess the profile compliance for nodes and platform resources across clusters.
1010

1111
.Prerequisites
1212

13-
* You have installed the Compliance Operator.
13+
* You have installed the Compliance Operator version 1.6.0 or later.
1414
+
1515
For more information about how to install the Compliance Operator, see "Using the Compliance Operator with {product-title}".
1616
+

modules/checking-the-compliance-status-of-your-infrastructure.adoc

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -23,8 +23,8 @@ The compliance container collects the following data about your environment:
2323
[NOTE]
2424
====
2525
* The following terms are associated with a compliance scan:
26-
** *Control* describes a single line item in an industry or regulatory standard that an auditor uses to evaluate an information system for compliance with that standard. {product-title-short} verifies evidence of compliance with a single control by performing one or more checks.
27-
** *Check* is the single test performed during a single control assessment.
26+
Control:: Describes a single line item in an industry or regulatory standard that an auditor uses to evaluate an information system for compliance with that standard. {product-title-short} verifies evidence of compliance with a single control by performing one or more checks.
27+
Check:: Is the single test performed during a single control assessment.
2828
* Some controls have multiple checks associated with them. If one of the associated checks for a control fails, the entire control state is marked as Fail.
2929
====
3030

modules/compliance-assessment-and-reporting-by-using-rhacs.adoc

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,9 @@ You can run out-of-the-box compliance scans based on the following industry stan
1515
* *National Institute of Standards and Technology (NIST) Special Publication 800-190*
1616
* *NIST Special Publication 800-53*
1717
* *Payment Card Industry Data Security Standard* (PCI DSS)
18-
* *OpenShift Compliance Operator Profiles*: The Compliance Operator evaluates the compliance of both the {ocp} Kubernetes API resources and the nodes running the cluster. There are several profiles available as part of the Compliance Operator installation.
18+
* *OpenShift Compliance Operator Profiles*
19+
+
20+
The Compliance Operator evaluates the compliance of both the {ocp} Kubernetes API resources and the nodes running the cluster. There are several profiles available as part of the Compliance Operator installation.
1921
+
2022
For more information about the available profiles, see link:https://docs.redhat.com/en/documentation/openshift_container_platform/{ocp-latest-version}/html-single/security_and_compliance/index#compliance-operator-supported-profiles[Supported compliance profiles].
2123

modules/configuration-details-tab.adoc

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -13,19 +13,19 @@ The *Configuration details* tab displays information about the scan schedule inf
1313

1414
The *Parameters* section organizes information into the following groups:
1515

16-
* *Name*: The unique identifier for the compliance scan.
17-
* *Description*: Specifies additional information about the compliance scan.
18-
* *Schedule*: Specifies when the compliance scans should run.
19-
* *Last scanned*: The timestamp of the last compliance scan performed.
20-
* *Last updated*: The last date and time that the compliance scan data was modified.
16+
Name:: The unique identifier for the compliance scan.
17+
Description:: Specifies additional information about the compliance scan.
18+
Schedule:: Specifies when the compliance scans should run.
19+
Last scanned:: The timestamp of the last compliance scan performed.
20+
Last updated:: The last date and time that the compliance scan data was modified.
2121

2222
[discrete]
2323
== Clusters section
2424

2525
The *Clusters* section organizes information into the following groups:
2626

27-
* *Cluster*: Lists the one or more clusters associated with a compliance scan.
28-
* *Operator status*: Indicates the current health or operational status of the Operator.
27+
Cluster:: Lists the one or more clusters associated with a compliance scan.
28+
Operator status:: Indicates the current health or operational status of the Operator.
2929

3030
[discrete]
3131
== Profiles section
@@ -37,6 +37,6 @@ The *Profiles* section lists the one or more profiles associated with a complian
3737

3838
The *Delivery destinations* section organizes information into the following groups:
3939

40-
* *Email notifier*: Specifies the email notification system or tool set up to distribute reports or alerts.
41-
* *Distribution list*: Lists the recipients who should receive the notifications or reports.
42-
* *Email template*: Specifies the email format used for the notifications. You can use the default or customize the email subject and body as needed.
40+
Email notifier:: Specifies the email notification system or tool set up to distribute reports or alerts.
41+
Distribution list:: Lists the recipients who should receive the notifications or reports.
42+
Email template:: Specifies the email format used for the notifications. You can use the default or customize the email subject and body as needed.

modules/coverage-page-overview.adoc

Lines changed: 21 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -4,32 +4,37 @@
44

55
:_mod-docs-content-type: CONCEPT
66
[id="coverage-page-overview_{context}"]
7-
= Coverage page overview
7+
= OpenShift Coverage page overview
88

9-
When you view the coverage page and apply a filter to a schedule, all results are filtered accordingly. This filter remains active for all coverage pages until you delete it. You can always view the results based on a single profile.
9+
When you view the *Coverage* page and apply a filter to a schedule, all results are filtered accordingly. This filter remains active for all coverage pages until you delete it. You can always view the results based on a single profile.
1010

1111
You can select profiles grouped according to their associated benchmarks by using the toggle group. You calculate the compliance percentage based on the number of passed checks in relation to the total number of checks.
1212

13+
[NOTE]
14+
====
15+
The *Coverage* page now only shows the results of the last scan. If the last scan fails, the {rh-rhacs-first} deletes the previous results and you cannot see any information for this scan on the *Coverage* page.
16+
====
17+
1318
The *Checks* view lists the profile checks and enables you to easily navigate and understand your compliance status.
1419

1520
The profile check information is organized into the following groups:
1621

17-
* *Check*: The name of the profile check.
18-
* *Controls*: Shows the various controls associated with each check.
19-
* *Fail status*: Shows the checks that have failed and require your attention.
20-
* *Pass status*: Shows the checks that have been successfully passed.
21-
* *Manual status*: Shows the checks that require a manual review because additional organizational or technical knowledge is required that you cannot automate.
22-
* *Other status*: Shows the checks with a status other than pass or fail, such as warnings or informational statuses.
23-
* *Compliance*: Shows the overall compliance status and helps you to ensure that your environment meets the required standards.
22+
Check:: The name of the profile check.
23+
Controls:: Shows the various controls associated with each check.
24+
Fail status:: Shows the checks that have failed and require your attention.
25+
Pass status:: Shows the checks that have been successfully passed.
26+
Manual status:: Shows the checks that require a manual review because additional organizational or technical knowledge is required that you cannot automate.
27+
Other status:: Shows the checks with a status other than pass or fail, such as warnings or informational statuses.
28+
Compliance:: Shows the overall compliance status and helps you to ensure that your environment meets the required standards.
2429

2530
The *Clusters* view lists the clusters and enables you to effectively monitor and manage your clusters.
2631

2732
The cluster information is organized into the following groups:
2833

29-
* *Cluster*: The name of the cluster.
30-
* *Last scanned*: Indicates when the individual clusters were last scanned.
31-
* *Fail status*: Shows the clusters whose scan has failed and which require your attention.
32-
* *Pass status*: Shows the clusters that have successfully passed all checks.
33-
* *Manual status*: Shows the checks that require a manual review because additional organizational or technical knowledge is required that you cannot automate.
34-
* *Other status*: Shows the clusters that have a status other than pass or fail, such as warnings or informational alerts.
35-
* *Compliance*: Shows the overall compliance status of your clusters and helps you to ensure that they meet the required standards.
34+
Cluster:: The name of the cluster.
35+
Last scanned:: Indicates when the individual clusters were last scanned.
36+
Fail status:: Shows the clusters whose scan has failed and which require your attention.
37+
Pass status:: Shows the clusters that have successfully passed all checks.
38+
Manual status:: Shows the checks that require a manual review because additional organizational or technical knowledge is required that you cannot automate.
39+
Other status:: Shows the clusters that have a status other than pass or fail, such as warnings or informational alerts.
40+
Compliance:: Shows the overall compliance status of your clusters and helps you to ensure that they meet the required standards.

modules/customizing-and-automating-your-compliance-scans.adoc

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ You can only have one schedule that scans the same profile on the same cluster.
1616

1717
.Prerequisites
1818

19-
* You have installed the Compliance Operator.
19+
* You have installed the Compliance Operator version 1.6.0 or later.
2020
+
2121
For more information about how to install the Compliance Operator, see "Using the Compliance Operator with {product-title}".
2222
+
@@ -29,7 +29,7 @@ For more information about how to install the Compliance Operator, see "Using th
2929

3030
.Procedure
3131

32-
. In the {product-title-short} portal, click *Compliance -> Schedules*.
32+
. In the {product-title-short} portal, click *Compliance -> OpenShift Schedules*.
3333
. Click *Create scan schedule*.
3434
. In the *Create scan schedule* page, provide the following information:
3535

@@ -39,7 +39,7 @@ For more information about how to install the Compliance Operator, see "Using th
3939

4040
** *Schedule*: Adjust the scan schedule to fit your required schedule:
4141

42-
*** *Frequency*: From the drop-down list, select how often you want to perform the scan.
42+
*** *Frequency*: From the drop-down list, select how often you want to run the scan. If you do not select a frequency, `Daily` is selected automatically.
4343
+
4444
The following values are associated with how often you want to perform the scan:
4545
@@ -69,9 +69,9 @@ These values are only applicable if you specify the frequency of scan as `Weekly
6969
*** *Time*: Start to type the time in `hh:mm` at which you want to run the scan. From the list that is displayed, select a time.
7070
7171
. Click *Next*.
72-
. In the *Clusters* page, select one or more clusters that you want to include in the scan.
72+
. Select one or more healthy clusters that you want to include in the scan.
7373
. Click *Next*.
74-
. In the *Profiles* page, select one or more profiles that you want to include in the scan.
74+
. Select one or more profiles that you want to include in the scan.
7575
. Click *Next*.
7676
. Optional: To configure email delivery destinations for manually triggered reports, perform the following steps:
7777
+
@@ -136,8 +136,8 @@ Optional: To customize the email subject and body as needed, perform the followi
136136

137137
.Verification
138138

139-
. In the {product-title-short} portal, click *Compliance -> Schedules*.
140-
. Select the compliance scan you have created.
139+
. In the {product-title-short} portal, click *Compliance -> OpenShift Schedules*.
140+
. Select the compliance scan that you have created.
141141
. In the *Clusters* section, verify that the operator status is healthy.
142142
. Optional: To edit the scan schedule, perform the following steps:
143143
.. From the *Actions* drop-down list, which is in the upper right of the page, select *Edit scan schedule*.
@@ -148,7 +148,7 @@ Optional: To customize the email subject and body as needed, perform the followi
148148
[NOTE]
149149
====
150150
* You can only send a scan report manually if you have configured an email delivery destination.
151-
* Compliance reporting is only available for clusters running Compliance Operator version 1.6 or later.
151+
* Compliance reporting is only available for clusters running Compliance Operator version 1.6.0 or later.
152152
====
153153
** From the *Actions* drop-down list, which is in the upper right of the page, select *Send report*.
154154
+
@@ -157,7 +157,7 @@ You receive a confirmation that you have requested to send a report.
157157
+
158158
[NOTE]
159159
====
160-
Compliance reporting is only available for clusters running Compliance Operator version 1.6 or later.
160+
Compliance reporting is only available for clusters running Compliance Operator version 1.6.0 or later.
161161
====
162162
.. From the *Actions* drop-down list, which is in the upper right of the page, select *Generate download*.
163163
+

modules/monitoring-and-analyzing-the-health-of-your-clusters.adoc

Lines changed: 21 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,9 +15,28 @@ Wait until the Compliance Operator returns the scan results. It might take a few
1515

1616
.Procedure
1717

18-
. In the {product-title-short} portal, click *Compliance -> Coverage*.
18+
. In the {product-title-short} portal, click *Compliance -> OpenShift Coverage*.
1919
. Select a cluster to view the details of the individual scans.
20-
. Optional: Enter the name of the profile check in the *Filter by keyword box* to view the status.
20+
. Optional: Choose the appropriate method to re-organize the information in the *Coverage* page.
21+
** To filter the scan results based on a scan schedule, from the drop-down list, select the scan schedule. If you do not select a particular scan schedule, *All scan schedules* is selected automatically.
22+
** To filter the scan results based on an entity and its attributes, do any of the following tasks:
23+
+
24+
[IMPORTANT]
25+
====
26+
To select multiple entities and attributes, click the right arrow icon to add another search criteria.
27+
====
28+
+
29+
*** To filter the scan results based on a profile check, enter the name of the profile check in the search bar to view the status.
30+
*** To filter the scan results based on cluster attributes, from the drop-down list, select *Cluster*, and then select an attribute. Enter the details of the cluster attribute in the search bar to view the status.
31+
+
32+
The following values are associated with the attributes of a cluster:
33+
+
34+
**** `ID`
35+
**** `Name`
36+
**** `Label`
37+
**** `Type`
38+
**** `Platform Type`
39+
2140
. Optional: From the *Compliance status* drop-down list, select one or more statuses by using which you want to filter the scan details.
2241
+
2342
The following values are associated with how you want to filter the scan details:

0 commit comments

Comments
 (0)