Control: Kubernetes clusters HTTP application routing should be disabled
Description
This control checks if HTTP application routing is disabled for Kubernetes cluster.
Usage
Run the control in your terminal:
powerpipe control run azure_compliance.control.kubernetes_cluster_http_application_routing_disabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run azure_compliance.control.kubernetes_cluster_http_application_routing_disabled --share
SQL
This control uses a named query:
select c.id as resource, case when addon_profiles -> 'httpApplicationRouting' ->> 'enabled' = 'true' then 'alarm' else 'ok' end as status, case when addon_profiles -> 'httpApplicationRouting' ->> 'enabled' = 'true' then c.name || ' HTTP application routing enabled.' else c.name || ' HTTP application routing disabled.' end as reason , c.resource_group as resource_group , sub.display_name as subscriptionfrom azure_kubernetes_cluster c, azure_subscription subwhere sub.subscription_id = c.subscription_id;