Skip to main content

​
More Info:

Kubernetes provides a default namespace, where objects are placed if no namespace is specified for them. Placing objects in this namespace makes application of RBAC and other controls more difficult.

​
Risk Level

Low

​
Address

Security

​
Compliance Standards

  • CIS Kubernetes

​
Triage and Remediation

​
Remediation

Using Console

Run this command to list objects in default namespacekubectl get $(kubectl api-resources —verbs=list —namespaced=true -o name |paste -sd, -) —ignore-not-found -n defaultThe only entries there should be system managed resources such as the kubernetesservice