Unexpected outbound connection destination
Event Information
Meaning
- This event indicates that a pod in the Kubernetes cluster is attempting to establish an outbound connection to a destination that is not expected based on the defined network policies.
- To investigate further, you can use the following kubectl command to identify the pod generating the unexpected outbound connection:
kubectl get pods --all-namespaces -o wide
- Once you have identified the pod, you can review its configuration and network policies to determine why it is attempting to connect to the unexpected destination:
kubectl describe pod <pod_name> -n <namespace>
Remediation
- Create a NetworkPolicy to restrict outbound connections:
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
name: restrict-outbound-connections
spec:
podSelector: {}
policyTypes:
- Egress
egress:
- ports:
- port: 80
protocol: TCP
- port: 443
protocol: TCP
- Apply the NetworkPolicy to the namespace where the affected pods are running:
kubectl apply -f networkpolicy.yaml -n <namespace>
- Verify that the NetworkPolicy is applied correctly:
kubectl get networkpolicy restrict-outbound-connections -n <namespace>