Compliance Remediation Groupings

This page provides links to remediation groupings organized by OCP version. Each version has its own set of compliance remediations collected from the OpenShift Compliance Operator.

---

Available Versions

OCP Version	Groups	Remediations	Status
OCP 5.0	40 groups	914 total	Active
OCP 4.22	40 groups (33 tested)	910 total	Active
OCP 4.21	17 groups	82 total	Active

---

About Remediation Groupings

Remediation groupings consolidate individual compliance check failures into logical groups that can be addressed together. Each group typically results in a single MachineConfig or CRD that remediates multiple related checks.

Grouping Categories:

• SSHD Hardening - SSH daemon security settings
• Kernel Sysctl - Kernel security parameters
• Audit Rules - System auditing configuration
• Crypto Policy - Cryptographic standards
• API Server - OpenShift API server settings
• PAM Configuration - Pluggable Authentication Modules

Status Legend:

• 🔵 In Progress - Active PR open for remediation
• 🟡 Pending - Not yet started
• ⚪ On Hold - Paused (e.g., focusing on higher severity first)
• 🟢 Complete - Merged and verified

---

Adding a New Version

To add remediation groupings for a new OCP version:

1. Create directory: docs/versions/X.XX/
2. Add remediations.md with version-specific content
3. Update this index page with a link to the new version