Security Misconfiguration: Activation of host Network
Dear Colleague,
We are looking to find ways to help developers find security misconfigurations, i.e., violation of security best practices in Kubernetes manifests. We noticed one instance of true hosted network, and was wondering if you will repair this. For examples of Kubernetes security misconfiguration, we are using our peer-reviewed publication on Kubernetes security best practices (https://arxiv.org/pdf/2006.15275.pdf).
Location: https://gitlab.com/piotr.szlenk/calico-cumulus/-/blob/master/demo-multicast/daemonset-pimd.yaml
In line 17, remove hostNetwork: true
We would like to hear if you agree to fix this misconfiguration or have fixed the misconfiguration.