OCI OKE Should Minimize Containers Sharing the Host Network Namespace

More Info:

hostNetwork=true gives a pod direct access to node interfaces, bypassing NetworkPolicy and potentially exposing kubelet, kube-proxy, and other host services. Restrict this to system add-ons that genuinely require it.

Risk Level

High

Address

Compliance, Security

Compliance Standards

CIS OKE

Triage and Remediation

Remediation

Remediation

Using Console

Refer to the remediation guidance for this control. Detailed console, CLI and Python steps are being generated.

⌘I

​More Info:

​Risk Level

​Address

​Compliance Standards

​Triage and Remediation

​Remediation