Control: Ensure Container-Optimized OS (cos) is used for Kubernetes engine clusters

powerpipe control run gcp_compliance.control.gke_container_optimized_os

powerpipe login
powerpipe control run gcp_compliance.control.gke_container_optimized_os --share

select
  self_link resource,
  case
    when node_config ->> 'ImageType' = 'COS_CONTAINERD' then 'ok'
    else 'alarm'
  end as status,
  case
    when node_config ->> 'ImageType' = 'COS_CONTAINERD' then title || ' Container-Optimized OS(COS) is used.'
    else title || ' Container-Optimized OS(COS) not used.'
  end as reason
  
  , location as location, project as project
from
  gcp_kubernetes_cluster;