turbot/kubernetes_compliance

Control: Namespaces should have a default network policy to deny all ingress traffic

Description

Administrators should use a default policy selecting all Pods to deny all ingress traffic and ensure any unselected Pods are isolated. Additional policies could then relax these restrictions for permissible connections.

Usage

Run the control in your terminal:

powerpipe control run kubernetes_compliance.control.network_policy_default_deny_ingress

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run kubernetes_compliance.control.network_policy_default_deny_ingress --share

SQL

This control uses a named query:

network_policy_default_deny_ingress

Tags