Red Hat OpenShift
TMA-OPENSHIFT-5.3.2
Ensure that all Namespaces have Network Policies defined
Description
Use network policies to isolate traffic in your cluster network. The benchmark marks this recommendation Manual.
Méthode de vérification
Méthode d'audit: Revue manuelle
The OpenShift 4 CNI plugin uses network policies and by default all Pods in a project are accessible from other Pods and network endpoints. To isolate one or more Pods in a project, you create NetworkPolicy objects in that project to indicate the allowed incoming connections. Project administrators can create and delete NetworkPolicy objects within their own project. For more information see: Run the following command and review the NetworkPolicy objects created in the cluster.
Méthode de correction
Méthode de correction: Recommandation ou correctif d'infrastructure
Follow the documentation and create NetworkPolicy objects as you need them.
Propriétés
- Systèmes d'exploitation
- Tous
- Étiquettes
- openshiftpoliciesnetwork
- Référence
- CIS Red Hat OpenShift Container Platform Benchmark v2.0.0 - 5.3.2 Ensure that all Namespaces have Network Policies defined