controls:
- id: SRG-APP-000158-CTR-000390
  levels:
  - medium
  title: {{{ full_name }}} must uniquely identify all network-connected nodes
    before establishing any connection.
  status: inherently met
  artifact_description: |-
    Supporting evidence is in the following documentation
    https://docs.openshift.com/container-platform/latest/security/certificate_types_descriptions/node-certificates.html
  status_justification: |-
    Internal components are secured with two-way TLS.
    https://docs.openshift.com/container-platform/latest/security/certificate_types_descriptions/node-certificates.html
    Node certificates are signed by the cluster; they come from a certificate authority (CA) that is generated by the bootstrap process. Once the cluster is installed, the node certificates are auto-rotated.
    Node certificates are managed by the cluster and not the user

