Chapter 1. Overview of Red Hat Insights for OpenShift Vulnerability dashboard service The Red Hat Insights for OpenShift Vulnerability Dashboard service provides information about the exposure of your Insights for OpenShift cluster infrastructure to Common Vulnerabilities and Exposures (CVEs). CVEs are security exposures or flaws identified in publicly-released software packages. Insights for OpenShift repeatedly analyzes data collected by the Insights Operator about your clusters and images, as well as CVES. The results from the analysis are used to provide information about how vulnerable your OpenShift clusters are to CVEs. You can view analysis results in the Insights for OpenShift Vulnerability Dashboard, which is located in the Red Hat Hybrid Cloud Console. For more information about remote health monitoring, see About remote health monitoring . Using the Red Hat Insights for OpenShift vulnerability dashboard service, you can make assessments and perform comprehensive monitoring of the exposure of your clusters and images to CVEs, enabling you to better understand and prioritize the risks posed to your organization. The Red Hat Insights for OpenShift vulnerability dashboard provides CVE data for: Your Insights for OpenShift components of Openshift running as containers (e.g. operators) are covered, but the operating system running under the cluster is not covered Images from catalog.redhat.com Note The Red Hat Insights for OpenShift vulnerability dashboard service provides CVE information about workloads running on the cluster if the workload is a known image to catalog.redhat.com. The service does not provide CVE data about custom workloads (completely custom images or images using catalog.redhat.com images as a base). 1.1. Requirements and prerequisites to view data in the Red Hat Insights for OpenShift vulnerability dashboard For your cluster data to be visible in the Insights Vulnerability Dashboard service, your clusters must be connected and active, which means that your cluster must be registered to Red Hat OpenShift Cluster Manager. Registering to Red Hat OpenShift Cluster Manager enables remote health monitoring by default, allowing Telemetry and Insights Operator data to be sent to the vulnerability dashboard in the past 30 days. For more information about Telemetry and the Insights Operator, see About remote health monitoring . In some cases, your clusters might be disconnected or stop sending data. For example, a cluster in an air-gapped environment is a disconnected cluster. In this example you might need to register or upload your data in a different way than using the Red Hat OpenShift Cluster Manager web console. To learn more about registering a cluster, and what to do if you have disconnected clusters, see Registering OpenShift Container Platform clusters to OpenShift Cluster Manager . You can access the dashboard by navigating to OpenShift > Vulnerability Dashboard . From there you can expand the navigation panel to view CVEs and Clusters. You can assess the CVEs and look at vulnerable (also referred to as exposed) clusters and exposed images. Clicking on one of the options, CVEs or Clusters takes you to the following: The CVEs list view (shows a detailed view of CVEs, where you can view, sort, and filter to get more details about CVEs for exposed clusters and exposed images within those clusters) The Clusters list view (shows a detailed view of vulnerable clusters, where you can view, sort, and filter to get more details about exposed clusters and exposed images within those clusters) Note You will see a list of your clusters if the Insights Operator has sent information within the past 30 days. Important Red Hat Insights for OpenShift does not determine whether any of your connected Insights for OpenShift clusters have been exploited. The Red Hat Insights for OpenShift vulnerability dashboard identifies CVEs that might pose a risk to clusters and images in your Red Hat OpenShift Container Platform environment. Additional resources Getting Started with Red Hat Insights for OpenShift OpenShift Cluster Manager Information about CVEs at mitre.org 1.2. About Common Vulnerabilities and Exposures (CVEs) in Red Hat Insights for OpenShift You can use Red Hat Insights for OpenShift to identify Common Vulnerabilities and Exposures (CVEs) affecting your Insights for OpenShift clusters, and to help you understand the potential risks to your clusters. You can use the visibility of CVEs affecting your Insights for OpenShift clusters to prioritize your most critical issues. Important Only CVEs with Red Hat-issued security advisories (RHSAs) are included in the Red Hat Insights for OpenShift vulnerability dashboard. Additional resources What is a CVE Explaining Red Hat Errata 1.3. Data collection and security Red Hat Insights does not collect identifying information, such as user names, passwords, or certificates. See Red Hat Insights Data & Application Security for information about Insights data collection and controls. Additional resources About remote health monitoring Showing data collected by remote health monitoring Opting out of remote health reporting

Commands: