Assess and modify Maximo Visual Inspection to adhere to Kubernetes Application security controls and best practices for hardening applications for Ford and other customers.

To improve the availability, reliability, security, and scalable operations of Ford’s OpenShift clusters and the applications that share them, Ford Motor Company is enforcing K8s policies and best practices from Red Hat, Google, the Cloud Native Computing Foundation (CNCF), and the National Security Agency (NSA)/Infrastructure Security Agency (CISA) for hardening applications for Kubernetes platforms.

The policies ensure appropriate security, compensating controls, and operational risk mitigation – particularly in multi-tenant clusters. By improving the availability, reliability, security and scalable operations of K8s, businesses can achieve continuous, always-on operations.

Ford is requesting that IBM assess and make any required updates to the product to become compliant, preferably within 6 months.

If not compliant, the Ford-managed OpenShift Operations Team (“CaaS”) may require that Maximo Visual Inspection be uninstalled.

Further details about Ford’s policies are in the attached document, named ford-k8s-standards.docx

In case IBM would like to use Kyverno to automate assessing policy compliance and to identify any needed changes, Ford is also providing an export of our Kyverno-enforced policies in the file named, ford-kyverno-policies.zip. The policy YAML files may need modification to change the validationFailureAction: Enforce to validationFailureAction: Audit to generate a list of items that need remediation.