ROX-32677-vuln-in-console: adding new content for vulnerability info … by jlprevatt · Pull Request #106918 · openshift/openshift-docs

jlprevatt · 2026-02-18T17:23:48Z

…in web console

Version(s):
4.10

Issue:
https://issues.redhat.com/browse/ROX-32677

Link to docs preview:

QE review:
ACS has no formal QE team to review

Additional information:

…in web console

kcarmichael08 · 2026-02-18T17:34:31Z

/retest

kcarmichael08 · 2026-02-18T17:44:06Z

/ok-to-test

openshift-ci · 2026-02-18T17:44:12Z

Hi @jlprevatt. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

ocpdocs-previewbot · 2026-02-18T17:44:28Z

🤖 Wed Feb 18 17:48:57 - Prow CI generated the docs preview:
https://106918--ocpdocs-pr.netlify.app
Complete list of updated preview URLs: artifacts/updated_preview_urls.txt

openshift-ci · 2026-02-18T17:55:09Z

@jlprevatt: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

kcarmichael08

This looks great! We just need to figure out where we want the assembly to show up in the content and add it into the topic map so it shows up in the doc.

kcarmichael08 · 2026-02-18T18:34:28Z

configuration/accessing-vulnerability-information-in-web-console.adoc

We need to add an entry to the topic_map.yml file so that this assembly file gets put in the TOC and gets published. Right now it's not showing up in the preview because it's not in the TOC/yaml file. Not sure of the best place to put it - if it's in the "configuring" folder, it would go somewhere in this left TOC, but it doesn't really fit there so I'm not sure.

kcarmichael08 · 2026-02-18T18:37:08Z

configuration/accessing-vulnerability-information-in-web-console.adoc

+By enabling the {rh-rhacs-console-plugin} dynamic plugin during the installation of the {product-title-short} operator, you can access vulnerability management information for your secured cluster workloads directly from the {ocp} web console. 
+// FOR YOUR...: workloads? clusters? cluster workloads?
+
+With this dynamic plugin, data gathered by the {rh-rhacs-first} vulnerability management tools is displayed in the {ocp} interface, providing information about CVEs, image and workload vulnerabilities, and verified image signature status. Authorized security administrators, platform engineers, and application developers gain a unified view of security status that is embedded in their day-to-day {ocp} workflows. 


Suggested change

With this dynamic plugin, data gathered by the {rh-rhacs-first} vulnerability management tools is displayed in the {ocp} interface, providing information about CVEs, image and workload vulnerabilities, and verified image signature status. Authorized security administrators, platform engineers, and application developers gain a unified view of security status that is embedded in their day-to-day {ocp} workflows.

With this dynamic plugin, data gathered by {rh-rhacs-first} is displayed in the {ocp} interface, providing information about CVEs, image and workload vulnerabilities, and verified image signature status. Authorized security administrators, platform engineers, and application developers gain a unified view of security status that is embedded in their day-to-day {ocp} workflows.

kcarmichael08 · 2026-02-18T18:41:37Z

configuration/accessing-vulnerability-information-in-web-console.adoc

+With this dynamic plugin, data gathered by the {rh-rhacs-first} vulnerability management tools is displayed in the {ocp} interface, providing information about CVEs, image and workload vulnerabilities, and verified image signature status. Authorized security administrators, platform engineers, and application developers gain a unified view of security status that is embedded in their day-to-day {ocp} workflows. 
+
+// ARTIFACT FROM RHACS PLUGIN + RHDH FILE -- WHAT DOES THIS FeatureName TAG DO?
+//:FeatureName: Integration of vulnerability findings into the {rh-rhdh}


Only needed if a feature is technology preview, so you can ignore the tag since this is GA (I think it's GA, right?

kcarmichael08 · 2026-02-18T18:44:36Z

configuration/accessing-vulnerability-information-in-web-console.adoc

+// ARTIFACT FROM RHACS PLUGIN + RHDH FILE -- WHAT DOES THIS FeatureName TAG DO?
+//:FeatureName: Integration of vulnerability findings into the {rh-rhdh}
+include::snippets/technology-preview.adoc[]
+


I think we would need to add an include for the viewing-vulnerability-information.adoc module here so that it shows up in the "Accessing vulnerability information in the OCP web console" page under the introductory/summary text.

kcarmichael08 · 2026-02-18T18:46:23Z

modules/viewing-vulnerability-information-in-web-console.adoc

+
+[NOTE]
+====
+You can also view vulnerability information on details views for other pages in the {ocp} web console by clicking the *Security* tab, such as in the details views for individual projects, namespaces, deployments, daemonsets, and so on.


Suggested change

You can also view vulnerability information on details views for other pages in the {ocp} web console by clicking the *Security* tab, such as in the details views for individual projects, namespaces, deployments, daemonsets, and so on.

You can also view vulnerability information in other pages in the {ocp} web console by clicking the *Security* tab. For example, you can view vulnerability information in the details views for individual projects, namespaces, deployments, and daemonsets.

kcarmichael08 · 2026-02-18T18:47:20Z

modules/enabling-the-plugin.adoc

+
+If the {rh-rhacs-console-plugin} plugin is enabled on a secured cluster, a new *Security* navigation option, with a *Vulnerabilities* secondary option, displays in the web console navigation menu for authorized users with access to all of the deployment-like resources within the selected namespace.
+
+In addition to the new navigation option, if the {rh-rhacs-console-plugin} plugin is enabled on a secured cluster, a new *Security* tab displays on certain pages in the web console, such as the details views for individual projects, namespaces, deployments, daemonsets, and so on.


Suggested change

In addition to the new navigation option, if the {rh-rhacs-console-plugin} plugin is enabled on a secured cluster, a new *Security* tab displays on certain pages in the web console, such as the details views for individual projects, namespaces, deployments, daemonsets, and so on.

In addition to the new navigation option, if the {rh-rhacs-console-plugin} plugin is enabled on a secured cluster, a new *Security* tab displays on certain pages in the web console, such as the details views for individual projects, namespaces, deployments, and daemonsets.

kcarmichael08 · 2026-02-18T18:47:50Z

modules/enabling-the-plugin.adoc

+.Prerequisites
+// ARE THESE IN THE CORRECT ORDER? NOT SURE IF THE NOTEBOOKLM AI ASSIST PUT THESE IN THE RIGHT/MOST LOGICAL ORDER. 
+* You are running {ocp} version 4.19 or later.
+* You have installed secured cluster services, including sensor, on the cluster.


Suggested change

* You have installed secured cluster services, including sensor, on the cluster.

* You have installed secured cluster services, including Sensor, on the cluster.

Weird ACS-specific thing, we always capitalize Central, Sensor, Collector, etc.

kcarmichael08 · 2026-02-18T18:48:44Z

modules/enabling-the-plugin.adoc

+====
+
+.Prerequisites
+// ARE THESE IN THE CORRECT ORDER? NOT SURE IF THE NOTEBOOKLM AI ASSIST PUT THESE IN THE RIGHT/MOST LOGICAL ORDER. 


The Operator step would go before the secured cluster services step IMO.

kcarmichael08 · 2026-02-18T18:49:14Z

modules/enabling-the-plugin.adoc

+// ARE THESE IN THE CORRECT ORDER? NOT SURE IF THE NOTEBOOKLM AI ASSIST PUT THESE IN THE RIGHT/MOST LOGICAL ORDER. 
+* You are running {ocp} version 4.19 or later.
+* You have installed secured cluster services, including sensor, on the cluster.
+* You have installed the {product-title} Operator on the cluster.


Suggested change

* You have installed the {product-title} Operator on the cluster.

* You have installed the {product-title-short} Operator on the cluster.

kcarmichael08 · 2026-02-18T18:52:29Z

configuration/accessing-vulnerability-information-in-web-console.adoc

+// IN THE INTERFACE, THIS APPEARS AS "console plugin" IN THE OPERATOR INSTALLATION, BUT FROM THE INSTALLED OPERATORS PAGE FOR RHACS OPERATOR IT APPEARS IN THE SIDEBAR INFO AS A NAMED "advanced-cluster-security" PLUGIN UNDER A GENERIC "Console plugin" HEADER. UNSURE WHY THIS APPEARS WITH DIFFERNT NAMES IN DIFFERENT LOCATIONS IN THE GUI. IN THE FUTURE IF OTHER CONSOLE PLUGINS ARE ADDED, IT CANNOT BE GENERICALLY LABELED AS "Console plugin" IN THE RHACS OPERATOR INSTALLATION.
+// ALSO UNCLEAR IF THIS FUNCTION/CODE IS THE SAME AS THE "RHACS PLUGIN" THAT YOU INSTALL WITH RHDH OR DIFFERENT FUNCTION/CODE.
+
+By enabling the {rh-rhacs-console-plugin} dynamic plugin during the installation of the {product-title-short} operator, you can access vulnerability management information for your secured cluster workloads directly from the {ocp} web console. 


Since it's enabled by default, I don't think we have to say "By enabling the {rh-rhacs-console-plugin} dynamic plugin during the installation of the {product-title-short} operator,"

Maybe just say something like:

{product-title} provides a dynamic plugin that is enabled by default to provide vulnerability management information for your secured cluster workloads directly in the {ocp} web console.

ROX-32677-vuln-in-console: adding new content for vulnerability info …

421f0cb

…in web console

openshift-ci bot added the size/M Denotes a PR that changes 30-99 lines, ignoring generated files. label Feb 18, 2026

openshift-ci bot added the needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. label Feb 18, 2026

openshift-ci bot added ok-to-test Indicates a non-member PR verified by an org member that is safe to test. and removed needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. labels Feb 18, 2026

kcarmichael08 reviewed Feb 18, 2026

View reviewed changes

	You can also view vulnerability information on details views for other pages in the {ocp} web console by clicking the Security tab, such as in the details views for individual projects, namespaces, deployments, daemonsets, and so on.
	You can also view vulnerability information in other pages in the {ocp} web console by clicking the Security tab. For example, you can view vulnerability information in the details views for individual projects, namespaces, deployments, and daemonsets.


		If the {rh-rhacs-console-plugin} plugin is enabled on a secured cluster, a new Security navigation option, with a Vulnerabilities secondary option, displays in the web console navigation menu for authorized users with access to all of the deployment-like resources within the selected namespace.

		In addition to the new navigation option, if the {rh-rhacs-console-plugin} plugin is enabled on a secured cluster, a new Security tab displays on certain pages in the web console, such as the details views for individual projects, namespaces, deployments, daemonsets, and so on. No newline at end of file

	* You have installed secured cluster services, including sensor, on the cluster.
	* You have installed secured cluster services, including Sensor, on the cluster.

	* You have installed the {product-title} Operator on the cluster.
	* You have installed the {product-title-short} Operator on the cluster.

Conversation

jlprevatt commented Feb 18, 2026

Uh oh!

kcarmichael08 commented Feb 18, 2026

Uh oh!

kcarmichael08 commented Feb 18, 2026

Uh oh!

openshift-ci bot commented Feb 18, 2026

Uh oh!

ocpdocs-previewbot commented Feb 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

openshift-ci bot commented Feb 18, 2026

Uh oh!

kcarmichael08 left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Comments

ocpdocs-previewbot commented Feb 18, 2026 •

edited

Loading