turbot/gcp_compliance

Control: Check that legacy metadata endpoints are disabled on Kubernetes clusters(disabled by default since GKE 1.12+)

Usage

Run the control in your terminal:

powerpipe control run gcp_compliance.control.disable_gke_legacy_endpoints

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run gcp_compliance.control.disable_gke_legacy_endpoints --share

SQL

This control uses a named query:

kubernetes_cluster_legacy_endpoints_disabled

Tags