Namespaces Should Enforce Pod Security Admission Baseline Or Stricter

More Info:

Verifies each namespace is labeled with pod-security.kubernetes.io/enforce set to baseline or restricted so the built-in Pod Security Admission controller rejects unsafe pods.

Risk Level

High

Address

Security

Compliance Standards

Cloudanix Best Practice

Triage and Remediation

Remediation

Remediation

Using Console

Refer to the remediation guidance for this control. Detailed console, CLI and Python steps are being generated.

⌘I

​More Info:

​Risk Level

​Address

​Compliance Standards

​Triage and Remediation

​Remediation