Ensure that all Namespaces have Network Policies defined

보통레벨 2수동 검토openshift

설명

Use network policies to isolate traffic in your cluster network. The benchmark marks this recommendation Manual.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

The OpenShift 4 CNI plugin uses network policies and by default all Pods in a project are accessible from other Pods and network endpoints. To isolate one or more Pods in a project, you create NetworkPolicy objects in that project to indicate the allowed incoming connections. Project administrators can create and delete NetworkPolicy objects within their own project. For more information see: Run the following command and review the NetworkPolicy objects created in the cluster.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Follow the documentation and create NetworkPolicy objects as you need them.

속성

운영 체제: 모두
태그: openshiftpoliciesnetwork
참고 자료: CIS Red Hat OpenShift Container Platform Benchmark v2.0.0 - 5.3.2 Ensure that all Namespaces have Network Policies defined