Compliance > Kubernetes > CIS 1.20 > Kubernetes Policies >

Network Policies and CNI

N/A

Source

Kube Bench

5.3

Version

cis-1.20

5.3 Network Policies and CNI

5.3.1 Ensure that the CNI in use supports Network Policies (Manual)

Recommended Action

If the CNI plugin in use does not support network policies, consideration should be given to making use of a different plugin, or finding an alternate mechanism for restricting traffic in the Kubernetes cluster.

5.3.2 Ensure that all Namespaces have Network Policies defined (Manual)

Recommended Action

Follow the documentation and create NetworkPolicy objects as you need them.

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.