Query: ReplicationController containers should not run with host network access

Description

Containers in a ReplicationController should not run in the host network of the node where the pod is deployed. When running on the host network, the pod can use the network namespace and network resources of the node. In this case, the pod can access loopback devices, listen to addresses, and monitor the traffic of other pods on the node.

Query

Tables used in this query:

• kubernetes_replication_controller

Controls using this query:

• ReplicationController containers should not run with host network access

SQL