Minimize the admission of Windows HostProcess Containers
core_minimize_admission_windows_hostprocess_containers
This check ensures that Kubernetes clusters are configured to minimize the admission of Windows containers with the hostProcess flag set to true, thus reducing the risk of privilege escalation and security breaches.
Risk
Allowing Windows containers with hostProcess can lead to increased security risks due to privileged access to Windows nodes.
prowler kubernetes --checks core_minimize_admission_windows_hostprocess_containers
Recommendation
Restrict the use of Windows HostProcess containers unless essential for their operation.
Remediation
Carefully review the need for HostProcess containers in Windows environments and restrict their use.
Source Code
Resource Type
KubernetesPod