turbot/steampipe-mod-gcp-compliance

Control: Ensure automatic node repair is enabled on all node pools in a GKE cluster

Usage

Run the control in your terminal:

powerpipe control run gcp_compliance.control.enable_auto_repair

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run gcp_compliance.control.enable_auto_repair --share

SQL

This control uses a named query:

select
self_link resource,
case
when np -> 'management' -> 'autoRepair' = 'true' then 'ok'
else 'alarm'
end as status,
case
when np -> 'management' -> 'autoRepair' = 'true' then title || ' Node pool auto repair enabled.'
else title || ' Node pool auto repair disabled.'
end as reason
, location as location, project as project
from
gcp_kubernetes_cluster,
jsonb_array_elements(node_pools) as np;

Tags