More Info:
Do not generally permit containers with the potentially dangerous NET_RAW capability.Risk Level
MediumAddress
SecurityCompliance Standards
- CIS Kubernetes
Triage and Remediation
- Remediation
Remediation
Using Console
Using Console
List the policies in use for each namespace in the cluster, ensure that at least one policydisallows the admission of containers with the NET_RAW capability.