lacework-global-791

Do not use the default namespace (Manual)

Description

Kubernetes provides a default namespace, where it places objects without a specified namespace. Placing objects in this namespace makes application of Role-Based Access Control (RBAC) and other controls more difficult.

Remediation

Create namespaces to allow for appropriate segregation of Kubernetes resources, and create all new resources in a specific namespace.

References

https://kubernetes.io/docs/concepts/overview/working-with-objects/namespaces/
https://kubernetes.io/docs/tasks/administer-cluster/namespaces-walkthrough/
https://kubernetes.io/docs/reference/access-authn-authz/rbac/