turbot/gcp_compliance

Query: kubernetes_cluster_client_certificate_authentication_enabled

Usage

powerpipe query gcp_compliance.query.kubernetes_cluster_client_certificate_authentication_enabled

Steampipe Tables

SQL

select
self_link resource,
case
when master_auth -> 'clusterCaCertificate' is not null or master_auth -> 'clientKey' is not null then 'ok'
else 'alarm'
end as status,
case
when master_auth -> 'clusterCaCertificate' is not null or master_auth -> 'clientKey' is not null then title || ' client certificate authentication enabled.'
else title || ' client certificate authentication disabled.'
end as reason
, location as location, project as project
from
gcp_kubernetes_cluster;

Controls

The query is being used by the following controls: