Control: Check that legacy metadata endpoints are disabled on Kubernetes clusters(disabled by default since GKE 1.12+)

powerpipe control run gcp_compliance.control.disable_gke_legacy_endpoints

powerpipe login
powerpipe control run gcp_compliance.control.disable_gke_legacy_endpoints --share

  select
  self_link resource,
  case
    when node_config -> 'Metadata' ->> 'disable-legacy-endpoints' = 'true' then 'ok'
    else 'alarm'
  end as status,
  case
    when node_config -> 'Metadata' ->> 'disable-legacy-endpoints' = 'true' then title || ' legacy endpoints disabled.'
    else title || ' legacy endpoints enabled.'
  end as reason
  
  , location as location, project as project
from
  gcp_kubernetes_cluster;