As rke2 is targeted for government workloads, do you guys have any recommendation on what type of monitoring, alerting and logging stack to use? Is there any flavor of existing open source project that support FIPS compliance or FedRamp? Any insights will be helpful.

gatekeeper btw, rke2 natively has CIS profile support to make the cluster pass CIS benchmarks.

can you provide a link the gatekeeper application?

https://github.com/open-policy-agent/gatekeeper, gk is more for CIS benchmark as of FIPS, i believe rke2 is natively FIPS compliant as compiled by boringcrypto , isn’t it?