Ensure Minimize The Admission of Containers Wishing to Share The Host Network Namespace in Kubernetes
A container running in the host's network namespace could access the local loopback device, and could access network traffic to and from other pods. There should be at least one PodSecurityPolicy (PSP) defined which does not permit containers to share the host network namespace. Send results via Email.
icon
Breakdown
  1. Ensure Minimize The Admission of Containers Wishing to Share The Host Network Namespace.
  2. Send results via Email. This result step can be changed from Email to Slack, Microsoft Teams or Discord.