Ensure that all Namespaces have Network Policies defined

中レベル 2手動レビューopenshift

説明

Use network policies to isolate traffic in your cluster network. The benchmark marks this recommendation Manual.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

The OpenShift 4 CNI plugin uses network policies and by default all Pods in a project are accessible from other Pods and network endpoints. To isolate one or more Pods in a project, you create NetworkPolicy objects in that project to indicate the allowed incoming connections. Project administrators can create and delete NetworkPolicy objects within their own project. For more information see: Run the following command and review the NetworkPolicy objects created in the cluster.

修正方法

修正方法: ガイダンスまたは IaC パッチ

Follow the documentation and create NetworkPolicy objects as you need them.

プロパティ

オペレーティングシステム: すべて
タグ: openshiftpoliciesnetwork
参照: CIS Red Hat OpenShift Container Platform Benchmark v2.0.0 - 5.3.2 Ensure that all Namespaces have Network Policies defined