Query: Network policies should not have a default policy to allow all ingress traffic

Description

Administrators should use a default policy selecting all Pods to deny all ingress and egress traffic and ensure any unselected Pods are isolated. An 'allow all' policy would override this default and should not be used. Instead, use specific policies to relax these restrictions only for permissible connections.

Query

Tables used in this query:

• kubernetes_network_policy

Controls using this query:

• Network policies should not have a default policy to allow all ingress traffic

SQL