Control: Namespaces should have a default network policy to deny all ingress traffic
Description
Administrators should use a default policy selecting all Pods to deny all ingress traffic and ensure any unselected Pods are isolated. Additional policies could then relax these restrictions for permissible connections.
Usage
Run the control in your terminal:
powerpipe control run kubernetes_compliance.control.network_policy_default_deny_ingress
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run kubernetes_compliance.control.network_policy_default_deny_ingress --share
SQL
This control uses a named query:
network_policy_default_deny_ingress