Every Non-System Namespace Should Have A Default-Deny NetworkPolicy

Verifies each application namespace has a default-deny ingress NetworkPolicy. Without one, every pod is reachable from every other pod.

High

Security

Using Console

Refer to the remediation guidance for this control. Detailed console, CLI and Python steps are being generated.

⌘I