Enable karydia-default-network-policy for enhanced security - Githubissues

SAP-archive / karydia

Kubernetes Security Walnut

Other

76 stars 10 forks source link

Enable karydia-default-network-policy for enhanced security #164

Closed Tobias1501 closed 5 years ago

Tobias1501 commented 5 years ago

Description

Level 1 Network Policy / karydia-default-network-policy added security for the following aspects:

block access to host network (AWS only)
block access to meta data services (AWS, GCP, Azure and Alibaba Cloud)

Checklist

Before submitting this PR, please make sure:

[x] you have added integration tests
[x] your code builds clean with make
[x] your code lets succeed unit tests with make test
[x] your code lets succeed integration tests
[x] you have documented new or changed features

CodeClinch commented 5 years ago

the host network IP range, which we only know from AWS, on all hyperscale providers. The same applies to the meta da

We discussed this with Web IDE. It should be ok for a first version.