Query: Namespaces should have a default network policy to deny all ingress traffic

Description

Administrators should use a default policy selecting all Pods to deny all ingress traffic and ensure any unselected Pods are isolated. Additional policies could then relax these restrictions for permissible connections.

Query

Tables used in this query:

• kubernetes_namespace
• kubernetes_network_policy

Controls using this query:

• Namespaces should have a default network policy to deny all ingress traffic

SQL