Skip to content

bug(azure): cilium is missing in network_policy from Azure AKS resource #7297

Description

@HujinoKun

Hello,

When I run a scan with kics, it tells me that I'm not using network_policy, even though I'm using cilium.

AKS Network Policy Misconfigured, Severity: LOW, Results: 1
Description: Azure Kubernetes Service should have the proper network policy configuration to ensure the principle of least privileges, which means that 'network_profile.network_policy' should be defined
Platform: Terraform
CWE: 285
Learn more about this vulnerability: https://docs.kics.io/latest/queries/terraform-queries/azure/f5342045-b935-402d-adf1-8dbbd09c0eef
	[1]: main.tf:145
		144:     network_plugin     = "azure"
		145:     network_policy     = "cilium"
		146:     network_data_plane = "cilium"

Looking at the alert and urls, I come across this code :

https://github.com/Checkmarx/kics/blob/master/assets/queries/terraform/azure/aks_network_policy_misconfigured/query.rego

Would you please add cilium to the list? it would be great 💯

Metadata

Metadata

Assignees

No one assigned

    Labels

    azurePR related with Azure CloudbugSomething isn't workingcommunityCommunity contributionkubernetesKubernetes queryqueryNew query featureterraformTerraform query

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions