Control: Check that GKE clusters have a Network Policy installed

powerpipe control run gcp_compliance.control.gke_restrict_pod_traffic

powerpipe login
powerpipe control run gcp_compliance.control.gke_restrict_pod_traffic --share

select
  self_link resource,
  case
    when network_policy ->> 'enabled' = 'true' then 'ok'
    else 'alarm'
  end as status,
  case
    when network_policy ->> 'enabled' = 'true' then title || ' Network policy is enabled.'
    else title || ' Network policy is not enabled.'
  end as reason
  
  , location as location, project as project
from
  gcp_kubernetes_cluster;