Control: Ensure Kubernetes web UI/Dashboard is disabled
Usage
Run the control in your terminal:
powerpipe control run gcp_compliance.control.disable_gke_dashboard
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run gcp_compliance.control.disable_gke_dashboard --share
SQL
This control uses a named query:
select self_link resource, case when addons_config -> 'KubernetesDashboard' ->> 'disabled' = 'true' then 'ok' else 'alarm' end as status, case when addons_config -> 'KubernetesDashboard' ->> 'disabled' = 'true' then title || ' dashboard disabled.' else title || ' dashboard enabled.' end as reason , location as location, project as projectfrom gcp_kubernetes_cluster;