turbot/steampipe-mod-gcp-compliance

Control: GKE clusters private nodes should be configured

Description

This control ensures that GKE clusters private nodes are configured.

Usage

Run the control in your terminal:

powerpipe control run gcp_compliance.control.kubernetes_cluster_private_nodes_configured

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run gcp_compliance.control.kubernetes_cluster_private_nodes_configured --share

SQL

This control uses a named query:

select
self_link resource,
case
when private_cluster_config ->> 'enablePrivateNodes' = 'false'
or private_cluster_config -> 'enablePrivateNodes' is null then 'alarm'
else 'ok'
end as status,
case
when private_cluster_config ->> 'enablePrivateNodes' = 'false'
or private_cluster_config -> 'enablePrivateNodes' is null then title || ' private nodes not configured.'
else title || ' private nodes configured.'
end as reason
, location as location, project as project
from
gcp_kubernetes_cluster;

Tags