Unexpected outbound connection destination remediation

​

Event Information

​

Meaning

• This event indicates that a pod in the Kubernetes cluster is attempting to establish an outbound connection to a destination that is not expected based on the defined network policies.
• To investigate further, you can use the following kubectl command to identify the pod generating the unexpected outbound connection: kubectl get pods --all-namespaces -o wide
• Once you have identified the pod, you can review its configuration and network policies to determine why it is attempting to connect to the unexpected destination: kubectl describe pod <pod_name> -n <namespace>

​

Remediation

• Create a NetworkPolicy to restrict outbound connections:

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: restrict-outbound-connections
spec:
  podSelector: {}
  policyTypes:
  - Egress
  egress:
  - ports:
    - port: 80
      protocol: TCP
    - port: 443
      protocol: TCP

• Apply the NetworkPolicy to the namespace where the affected pods are running:

kubectl apply -f networkpolicy.yaml -n <namespace>

• Verify that the NetworkPolicy is applied correctly:

kubectl get networkpolicy restrict-outbound-connections -n <namespace>