Red Hat OpenShift
TMA-OPENSHIFT-5.3.2
Ensure that all Namespaces have Network Policies defined
Descrição
Use network policies to isolate traffic in your cluster network. The benchmark marks this recommendation Manual.
Como é verificado
Método de auditoria: Revisão manual
The OpenShift 4 CNI plugin uses network policies and by default all Pods in a project are accessible from other Pods and network endpoints. To isolate one or more Pods in a project, you create NetworkPolicy objects in that project to indicate the allowed incoming connections. Project administrators can create and delete NetworkPolicy objects within their own project. For more information see: Run the following command and review the NetworkPolicy objects created in the cluster.
Como é corrigido
Método de correção: Orientação ou patch de infraestrutura
Follow the documentation and create NetworkPolicy objects as you need them.
Propriedades
- Sistemas operacionais
- Qualquer
- Tags
- openshiftpoliciesnetwork
- Referência
- CIS Red Hat OpenShift Container Platform Benchmark v2.0.0 - 5.3.2 Ensure that all Namespaces have Network Policies defined