Benchmark: Network Separation and Hardening
Usage
Install the mod:
mkdir dashboardscd dashboardspowerpipe mod initpowerpipe mod install github.com/turbot/steampipe-mod-kubernetes-complianceStart the Powerpipe server:
steampipe service startpowerpipe serverOpen http://localhost:9033 in your browser and select Network Separation and Hardening.
Run this benchmark in your terminal:
powerpipe benchmark run kubernetes_compliance.benchmark.nsa_cisa_v1_network_hardeningSnapshot and share results via Turbot Pipes:
powerpipe benchmark run kubernetes_compliance.benchmark.nsa_cisa_v1_network_hardening --shareBenchmarks
- Containers should have a CPU limit
- Containers should have a CPU request
- Kubernetes API should serve on secure port
- Containers should have a memory limit
- Containers should have a memory request
- Network policy should have a default policy to deny all ingress and egress traffic