Using Default Namespace

Query id: abcb818b-5af7-4d72-aba9-6dd84956b451
Query name: Using Default Namespace
Platform: Terraform
Severity: Medium
Category: Insecure Configurations
URL: Github

Description¶

The default namespace should not be used
Documentation

Code samples¶

Code samples with security vulnerabilities¶

Positive test num. 1 - tf file

resource "kubernetes_pod" "test" {
  metadata {
    name = "terraform-example"
    namespace = "default"
  }
}

resource "kubernetes_cron_job" "test2" {
  metadata {
    name = "terraform-example"
  }
}

Code samples without security vulnerabilities¶

Negative test num. 1 - tf file

resource "kubernetes_pod" "test3" {
  metadata {
    name = "terraform-example"
    namespace = "terraform-namespace"
  }
}

resource "kubernetes_cron_job" "test4" {
  metadata {
    name = "terraform-example"
    namespace = "terraform-namespace"
  }
}