Default namespace is used misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_K8S_21
Category - Subcategory	Kubernetes - Access Control
Provider	OTHER
Severity	LOW
Framework	Helm, Kubernetes, Kustomize, Terraform, Terraform Plan

Impact

In Kubernetes, the cluster comes out of the box with a namespace called "default." Other namespaces Kubernetes includes are: default, kube-system and kube-public. Some Kubernetes tooling is set up out of the box to use this namespace and you can't delete it. We recommend that you do not use the default namespace in large production systems. Using this space can result in accidental disruption with other services. Instead, we recommend you create alternate namespaces and use them to run additional required services.

How to Fix

Resource: Pod / Deployment / DaemonSet / StatefulSet / ReplicaSet / ReplicationController / Job / CronJob

• Arguments: namespace (Optional)

Defines the used namespace. Default to default. [source,go]

apiVersion: kind: metadata: name:

• namespace:
• namespace: default

---