Query: compute_instance_block_project_wide_ssh_enabled

select
  self_link resource,
  case
    when name like 'gke-%' and labels ? 'goog-gke-node' then 'skip'
    when metadata -> 'items' @> '[{"key": "block-project-ssh-keys", "value": "true"}]' then 'ok'
    else 'alarm'
  end as status,
  case
    when name like 'gke-%' and labels ? 'goog-gke-node'
      then title || ' created by GKE.'
    when metadata -> 'items' @> '[{"key": "block-project-ssh-keys", "value": "true"}]'
      then title || ' has "Block Project-wide SSH keys" enabled.'
    else title || ' has "Block Project-wide SSH keys" disabled.'
  end as reason
  
  , location as location, project as project
from
  gcp_compute_instance;