1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21
|
controls:
- id: SRG-APP-000439-CTR-001080
levels:
- medium
title: The application must protect the confidentiality and integrity of transmitted
information.
status: manual
check: |-
Verify that routes and ingress are using secured transmission ports and protocols by executing the following:
oc get routes --all-namespaces
Review the ingress ports, if the Ingress is not using a secure TLS transport, this is a finding.
fixtext: |-
Delete any Route or Ingress that does not use a secure transport.
oc delete route <NAME> -n <NAMESPACE>
or
oc delete ingress <NAME> -n <NAMESPACE>
|