Red Hat Advanced Cluster Security 5 adds RHEL VM vulnerability management to OpenShift workloads, extending the platform’s existing container‑focused scanning to the operating‑system layer of virtual machines. Practitioners who operate hybrid environments of containers and VMs can now see OS‑level findings alongside container findings in a single console.
RHEL VM vulnerability management added
The latest release of Advanced Cluster Security for Kubernetes introduces a new scanning capability that targets Red Hat Enterprise Linux virtual machines. Previously, the product only evaluated container images and runtime workloads; the update brings the same vulnerability data model to VMs that are part of an OpenShift deployment.
Why engineers should care
Security engineers gain a consolidated view of risk across the full stack, reducing the need to run separate tools for containers and VMs. Cloud and platform engineers can align remediation pipelines, while DevOps and SRE teams benefit from a single source of truth when prioritising patches for both workload types.
Implications for architecture and operations
Integrating VM scanning may require enrolling each RHEL VM with the ACS agent or configuring the OpenShift cluster to expose VM metadata to the service. Existing policies that target container images can be extended to cover VM findings, but teams should verify that policy scopes correctly differentiate between container and VM contexts. Operationally, the added data stream will increase the volume of vulnerability reports, so alert fatigue and triage processes should be revisited.
Related CloudNinjas coverage: hands-on guides.
What This Means For Practitioners
- Review onboarding steps for RHEL VMs to ensure they are visible to ACS.
- Map current container security policies to the new VM findings and adjust thresholds as needed.
- Update monitoring dashboards to include OS‑level vulnerability metrics alongside container metrics.
- Plan for periodic validation that VM scan results are being consumed by existing remediation workflows.