SupportConsoleDevelopersStart a trialContact

Chapter 23. Accessing vulnerability information in the OpenShift Container Platform web console

Red Hat Advanced Cluster Security for Kubernetes (RHACS) includes a dynamic plugin as a part of the RHACS Operator. This plugin provides access to vulnerability management information for your secured cluster workloads directly from the OpenShift Container Platform web console.

With this console dynamic plugin, data gathered by RHACS is displayed in the OpenShift Container Platform interface, providing information about CVEs, image and workload vulnerabilities, and verified image signature status. Authorized security administrators, platform engineers, and application developers gain a unified view of security status that is embedded in their day-to-day OpenShift Container Platform workflows.

For information about plugin support in RHACS and OpenShift Container Platform, see the Red Hat Advanced Cluster Security for Kubernetes Support Matrix.

23.1. Enabling the plugin
Copy link

To view vulnerability information for a secured cluster in OpenShift Container Platform, make sure that the console dynamic plugin is enabled.

The console dynamic plugin is enabled by default when you install the RHACS Operator on a cluster. You can choose to disable the plugin if you do not want to use it. For upgrades, depending on the version you are upgrading from, you might need to enable the plugin during or after the installation of the RHACS Operator.

To review enablement status during Operator installation, or to enable the console plugin after Operator installation, use the following steps.

Prerequisites

  • You are running OpenShift Container Platform version 4.19, 4.20, 4.21, or 4.22.
  • You are running the RHACS version 4.10 code base for both secured cluster services and Central services.
  • You have access to an OpenShift Container Platform cluster using an account with Operator installation permissions.
  • As part of the installation process for the RHACS Operator, you will install secured cluster services on the cluster.

Procedure

  • During the installation of the RHACS Operator on the cluster, on the Install Operator page, ensure that the Console plugin option is set to Enable.

    Note

    You can also review and change the enablement status of the console dynamic plugin after the installation of the RHACS Operator by viewing the installed operator details and checking whether the Console plugin section shows the console plugin with an Enabled or Disabled status.

Verification

  • In the web console, verify that a new Security option, with a Vulnerabilities secondary option, displays in the navigation menu. If you are an authorized user with access to all of the deployment-like resources within the selected project or namespace for a secured cluster, use these options to view vulnerability information.
  • In addition, verify that a new Security tab displays on certain pages in the web console, such as the details views for individual projects, namespaces, deployments, and daemonsets.

Use the Security navigation option in the OpenShift Container Platform web console to view vulnerability information that is scoped to the namespace of a secured cluster.

Prerequisites

  • The console plugin is enabled on the secured cluster.

Procedure

  1. In the web console, ensure that the relevant project for the secured cluster is selected.
  2. In the OpenShift Container Platform web console navigation, click Security Vulnerabilities.
  3. From the Workload vulnerabilities page, click the CVEs, Images, or Deployments option to determine the context in which you want to view vulnerabilities.

  4. In the displayed results, click a specific result to view detailed information about the vulnerability.

    Note

    You can also view vulnerability information on other pages in the OpenShift Container Platform web console by clicking the Security tab. For example, you can view vulnerability information in the details views for individual projects, namespaces, deployments, and daemonsets.

Red Hat logoGithubredditYoutubeTwitter

Learn

Try, buy, & sell

Communities

About Red Hat

We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

Making open source more inclusive

Red Hat is committed to replacing problematic language in our code, documentation, and web properties. For more details, see the Red Hat Blog.

About Red Hat Documentation

We help Red Hat users innovate and achieve their goals with our products and services with content they can trust. Explore our recent updates.

Legal Notice

Theme

© 2026 Red HatBack to top