Control: GKE clusters logging should be enabled
Description
This control ensures that GKE clusters logging is enabled.
Usage
Run the control in your terminal:
powerpipe control run gcp_compliance.control.kubernetes_cluster_logging_enabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run gcp_compliance.control.kubernetes_cluster_logging_enabled --share
SQL
This control uses a named query:
select self_link resource, case when logging_service is null or logging_service = 'none' then 'alarm' else 'ok' end as status, case when logging_service is null or logging_service = 'none' then title || ' logging disabled.' else title || ' logging enabled.' end as reason , location as location, project as projectfrom gcp_kubernetes_cluster;