Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions policygenerator/policy-sets/community/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -13,5 +13,6 @@ Policy | Description | Prerequisites
[OpenShift Platform Plus (moved to stable)](../stable/openshift-plus) | The OpenShift Platform Plus policy set applies several policies that installs the OpenShift Platform Plus products using best practices that allow them to work well together. | The OpenShift Platform Plus policy set works with OpenShift managed clusters and installs many components to the hub cluster. See the policy set [README.md](../stable/openshift-plus/README.md) for more information on prerequisites. The `PolicySet` uses cluster `Placement` and not the `PlacementRule` placement mechanism.
[Kyverno Policy Sets](./kyverno) | The Kyverno policy sets are provided to help you apply best practices around security, multitenancy and applications. See the details for each each of the policy sets in the `kyverno` subdirectories. | The Kyverno `PolicySets` require the Kyverno helm chart to be installed on each managed cluster where you want to install the `PolicySets`. Use the policy [`policy-install-kyverno`](https://raw.githubusercontent.com/open-cluster-management-io/policy-collection/main/community/CM-Configuration-Management/policy-install-kyverno.yaml) to install kyverno and the policy [`policy-kyverno-config-exclude-resources`](https://raw.githubusercontent.com/open-cluster-management-io/policy-collection/main/community/CM-Configuration-Management/policy-kyverno-config-exclude-resources.yaml) to update Kyverno resource filters. The `PolicySet` uses cluster `Placement` and not the `PlacementRule` placement mechanism. For more details on Kyverno `PolicySet` installation, see the [README.md](./kyverno/README.md).
[`Operatorguardrails`](./operatorguardrails) | audit/check that unallowed operators are installed e.g. on OKE cluster |[README.md](./operatorguardrails/README.md).
[Zettaset Xcrypt](./zts-xcrypt) |The zettaset policy set deploys the policies for encryption of disk devices| See the [Zettaset README](https://github.com/zettaset/zettaset-public/) to learn more about Zettaset Xcrypt Deployment.
[Setup for OpenShift Platform Plus](./openshift-plus-setup) | The Setup for OpenShift Platform Plus policy set applies several policies that prepares the Red Had Advancend Cluster Management for Kubernetes hub cluster for OpenShift Platform Plus components. | The Setup for OpenShift Platform Plus policy set works with only the hub cluster. See the policy set [README.md](./openshift-plus-setup/README.md) for more information on prerequisites. The `PolicySet` uses cluster `Placement` and not the `PlacementRule` placement mechanism. Red Hat Advanced Cluster Management version 2.7 is required to install this PolicySet.
[PolicyGenerator Download](./policygenerator-download) | Configures a webserver to host the PolicyGenerator and adds the download to the OpenShift CLI Download page on the OpenShift Console. This ensures the version downloaded matches the version of Red Hat Advanced Cluster Management running on the hub. | Red Hat Advanced Cluster Management version 2.8 is required to install this Policy.