C-0061 - Pods in default namespace

Pods in default namespace


DevOpsBest, ArmoBest

Description of the the issue

It is recommended to avoid running PODs in cluster without explicit namespace assignment. This may lead to wrong capabilities and permissions assignment and potential compromises. This control identifies all the PODs running in the default namespace.

Related resources

CronJob, DaemonSet, Deployment, Job, Pod, ReplicaSet, StatefulSet

What does this control test

Check that there are no pods in the 'default' namespace


Create necessary namespaces and move all the PODs from default namespace there.


No example

Did this page help you?