| Feature | Benefit |
| Out-of-the-box policy templates for security, resiliency, and configuration management | Use prebuilt policy templates to enforce policy on Kubernetes configuration (e.g., etcd encryption), identity and access management (IAM), certificate management, and deploy and configure operators such as Compliance Operator, Gatekeeper/Open Policy Agent (OPA), and Container Security Operator across your clusters. Implement policy-based governance via GitOps to meet internal and external standards using the open source policy collection repository. |
| Governance and risk dashboard | Use the governance and risk dashboard to view and manage security risks and policy violations in all of your clusters and applications. Get details on violation history. Drill down into violation details by centrally accessing details from managed clusters from the Red Hat Advanced Cluster Management hub. |
| Customized policy violation views | Customize policies for various compliance standards, governance dashboard views, and views for most-affected controls for specific standards. |
| Open source extensible policy framework and policy collection repository | Develop custom policy controllers and policies and integrate them for centralized management into the governance and risk dashboard. Take advantage of the collaborative upstream policy contributions, using the policy collection repository. |
| Integration with Gatekeeper and Open Policy Agent (OPA) | Get a fully supported Gatekeeper and OPA operator that supports deployment of the Gatekeeper operator to your fleet using compliance policy. Initiate Gatekeeper controls across your fleet to enforce various OPA policies. Centrally view and drill down into violations for all your Gatekeeper and OPA policies. |
| Integration with Kyverno PolicySets | Get enhanced admission control capabilities and mutating capabilities with Kyverno PolicySets. Generate and validate Kubernetes resources with the Kyverno integration |
| Integration with OpenShift Compliance Operator | Deploy OpenShift Compliance Operator at scale across your fleet, using Red Hat Advanced Cluster Management to enforce various security profiles for compliance standards such as the E8 Essential scan. Centrally view and drill down into violations for all of these security profiles. |
| Ansible Automation Platform integration | Use Ansible Automation Platform integration with Red Hat Advanced Cluster Management to automate remediation of noncompliant conditions and gather audit information about the clusters for analysis to promote proactive measures against policy violations detected by Red Hat Advanced Cluster Management. |
| Deploy Red Hat Advanced Cluster SecurityCentral via governance, risk, and compliance (GRC) policy (TP) | Get a consolidated experience by using Red Hat Advanced Cluster Management console to deploy Red Hat Advanced Cluster Security (StackRox) Central server consistently across clusters by creating a single policy through a user-friendly interface. |
| Policy generator | Allow policies to be auto-generated and deployed via OpenShift GitOps from existing Kubernetes configuration, Gatekeeper, and Kyverno policies. |
| Stronger security and edge scalability using templatized policies | Get stronger security with Gatekeeper Mutating Webhooks, which implements controls around updating nonconformant resources and can be coupled with policy templating for additional encryption with secrets management integration. |
| More efficient policy management through PolicySets | Group policies for specific purposes (e.g., OpenShiftPlus deployment, ACM Hardening, managed cluster-hardening, grouping Gatekeeper policies, PCIStoreFront, HIPAA backend, etc.). This ensures an enhanced user-friendly experience of organizing, managing, and enforcing policies or policy sets for clusters at scale. Pre-configured PolicySets are available via GitOps as a starting point to use this feature. |
| Integrity of policies | Enable integrity for policies by signing them with Sigstore integration. |