Use multi-network policies

НизкийУровень 2Ручная проверкаopenshift-virt

Описание

Micro-segmentation in VLANs is crucial for enhancing network security because it allows control of traffic flow between different components of the network and their services. This segmentation helps to contain potential security breaches and limit the spread of malware or unauthorized access to information. The benchmark marks this recommendation Manual; TMAegis reports it as a manual review item with the audit steps.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

By default, no MultiNetworkPolicies are defined. To segregate one or more VMs/Pods in a project, you create MultiNetworkPolicy objects in that project to indicate the allowed incoming connections on a given network. Project administrators can create and delete MultiNetworkPolicy objects within their own project. Run the following command and review the MultiNetworkPolicy objects created in the cluster. $ oc -n all get multi-networkpolicy Ensure that each namespace defined in the cluster has at least one Multi - network Policy.

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

Follow the documentation linked below and create Multi - Network Polic y objects as you need them. Note: A Multi - network Policy must match a VM and also the this VM is connected to. NetworkAttachmentDefinition

Свойства

Операционные системы: Любая
Теги: openshift-virtmanual-review
Источник: CIS Red Hat OpenShift Virtual Machine Extension Benchmark v1.0.0 - 4.3 Use multi-network policies