Control: Check that legacy metadata endpoints are disabled on Kubernetes clusters(disabled by default since GKE 1.12+)
Usage
Run the control in your terminal:
powerpipe control run gcp_compliance.control.disable_gke_legacy_endpoints
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run gcp_compliance.control.disable_gke_legacy_endpoints --share
SQL
This control uses a named query:
kubernetes_cluster_legacy_endpoints_disabled