Hardening after the cluster is running

After the Red Hat OpenShift Container Platform cluster is up and running, there are several ways to apply hardening features to RHCOS:

  • Daemon set: If you need a service to run on every node, you can add that service with a Kubernetes DaemonSet object.

  • Machine config: MachineConfig objects contain a subset of Ignition configs in the same format. By applying machine configs to all worker or control plane nodes, you can ensure that the next node of the same type that is added to the cluster has the same changes applied.

All of the features noted here are described in the Red Hat OpenShift Container Platform product documentation.

← Previous: Hardening during installation | ↑ Up: Choosing how to harden RHCOS | ⌂ Home: Red Hat OpenShift Container Platform | Next: Persistent volume plugins →