STIG Hardening for Tanzu Kubernetes Clusters

Introduction

VMware is a trusted partner in highly secure, mission-critical systems around the world, including the United States Department of Defense (DoD). In the DoD, all IT systems must adhere to the rigorous Risk Management Framework (RMF) as defined in DoDI 8510.01. A critical component of RMF is the mandatory implementation of Security Technical Implementation Guides (STIGs) and Security Requirements Guidelines (SRGs) as maintained by the Defense Information Systems Agency (DISA). To support our customers, vSphere with Tanzu is evaluated and hardened against multiple standards, including the Photon OS 3.0 STIG Readiness Guide and the DISA Kubernetes STIG. This report documents product component compliance with those standards.

Intended Audience

The audience for the VMware STIG Hardening for Tanzu Kubernetes Clusters is VMware customers in the DoD needing to harden or accredit their vSphere with Tanzu environment(s).

There are many third-party engineered data center & hybrid cloud infrastructure products that also work with and host VMware software deployments. If this is how you consume these products,  check with your product’s support for specific guidance.

Download

The overview is available as a download:

https://core.vmware.com/kubernetes-stig-hardening-overview-vsphere-tanzu-kubernetes-clusters-20230120

If you want to link to this content please use the primary STIG resource page:

https://via.vmw.com/stig

Filter Tags

Compliance Security vSphere vSphere 8 vSphere with Tanzu Document Advanced