Ensure for exposing Kubernetes workload to the internet, NodePort service is not used

LOW

Description

Kubernetes NodePort service can expose the worker nodes as they have public interface along with other downsides such as dealing with IP change issues of the Node/VMs.

Remediation

It is recommended to expose your workloads with Kubernetes Ingress or LoadBalancer services when exposing to external traffic. Therefore, usage of nodeport should be minimized.

Policy Details

Rule Reference ID: AC_K8S_0111
Remediation Available: No
Resource Category: Management
Resource Type: Service

Frameworks