Skip to content

Each Namespace should only host one application

An XCCDF Rule

Description

Use namespaces to isolate your Kubernetes objects.

Rationale

Assigning a dedicated namespace to an application (or parts of an application) allows you to granularly control the access to this application on a kubernetes level. It also allows you control the network flow from and to other namespaces more easily.

ID
xccdf_org.ssgproject.content_rule_general_namespace_separation
Severity
Medium
References
Updated