Configured Network Policy

Ensure AKS cluster has Network Policy configured

The Kubernetes object type NetworkPolicy should be defined to have opportunity allow or block traffic to pods, as in a Kubernetes cluster configured with default settings, all pods can discover and communicate with each other without any restrictions.

Impact

No network policy is protecting the AKS cluster

Recommended Actions

Follow the appropriate remediation steps below to resolve the issue.

1
2
3
4
5
6

 resource "azurerm_kubernetes_cluster" "good_example" {
 	network_profile {
 	  network_policy = "calico"
 	  }
 }
 

Links

• https://kubernetes.io/docs/concepts/services-networking/network-policies