+APP.4.4.A14 Use of Dedicated Nodes (H)

APP.4.4.A14 Use of Dedicated Nodes (H)

In a Kubernetes cluster, nodes SHOULD be assigned dedicated tasks and only run pods that are assigned to each task.

Bastion nodes SHOULD handle all incoming and outgoing data connections of between applications and other networks.

Management nodes SHOULD operate control plane pods and only handle control plane data connections.

If deployed, storage nodes SHOULD only operate the fixed persistent volume services pods in a cluster.

1. Yleiskatsaus

1.1 Viittaukset

1.2 Tunnistetut vaatimukset

1.3 Liittyvät säädökset

2. Tunnistetut vaatimukset

Vaatimukset

3. Liittyvät säädökset

Säädökset

Linkitetyt tehtävät

Linkit
blocks G 0.14 Interception of Information / Espionage
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.28 Software Vulnerabilities or Errors
blocks G 0.45 Data Loss
blocks G 0.46 Loss of Integrity of Sensitive Information