MEDIUM
Source
CloudSploit
ID
network-policy-enabled

Network Policy Enabled

Ensures all Kubernetes clusters have network policy enabled

Kubernetes network policy creates isolation between cluster pods, this creates a more secure environment with only specified connections allowed.

Follow the appropriate remediation steps below to resolve the issue.

  1. Log into the Google Cloud Platform Console.

  2. Scroll down the left navigation panel and choose the “Kubernetes Engine” option under the “Compute” and select the “Clusters.” Step

  3. On the “Kubernetes clusters” page , click on the “Name” as a link option to select the cluster.Step

  4. On the “Clusters” page, click on the “Edit” button at the top.Step

  5. Scroll down the “Clusters - Edit” page and check whether “Network policy for master” is enabled or disabled. If it’s set to disabled then it’s not as per the best recommended method.Step

  6. Repeat steps number 2 - 5 to verify other “Clusters” in the account.

  7. Navigate to the “Kubernetes Engine” option under the “Compute”, choose the “Clusters” and click on the “Edit” button at the top.Step

  8. On the “Clusters - Edit” page, scroll down and choose the “Enabled” option from the dropdown menu next to “Network policy for master.”Step

  9. Click on the “Save” button to make the changes.Step

  10. Repeat steps number 7 - 9 to enable network policy on all Kubernetes clusters.