Detections
Analytics
CNTR-K8-000290 - User-managed resources must be created in dedicated namespaces.
Information
Creating namespaces for user-managed resources is important when implementing Role-Based Access Controls (RBAC). RBAC allows for the authorization of users and helps support proper API server permissions separation and network micro segmentation. If user-managed resources are placed within the default namespaces, it becomes impossible to implement policies for RBAC permission, service account usage, network policies, and more.NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Move any user-managed resources from the default, kube-public, and kube-node-lease namespaces to user namespaces.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Kubernetes_V2R5_STIG.zip
Item Details
Audit Name: DISA STIG Kubernetes v2r5
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-242383r1137641_rule, STIG-ID|CNTR-K8-000290, Vuln-ID|V-242383
Plugin: Unix
Control ID: 72e3a8f9b1e6786de742dccbc2428f8643c0332230703d4fcab1da34600f3c9f