turbot/gcp_compliance

Query: kubernetes_cluster_shielded_node_secure_boot_enabled

Usage

powerpipe query gcp_compliance.query.kubernetes_cluster_shielded_node_secure_boot_enabled

Steampipe Tables

SQL

select
self_link resource,
case
when (node_config -> 'ShieldedInstanceConfig' -> 'EnableSecureBoot')::bool then 'ok'
else 'alarm'
end as status,
case
when (node_config -> 'ShieldedInstanceConfig' -> 'EnableSecureBoot')::bool then title || ' shielded nodes secure boot enabled.'
else title || ' shielded nodes secure boot disabled.'
end as reason
, location as location, project as project
from
gcp_kubernetes_cluster;

Controls

The query is being used by the following controls: