Control: GKE clusters should have shielded nodes enabled
Description
This control ensures that GKE clusters have shielded nodes enabled.
Usage
Run the control in your terminal:
powerpipe control run gcp_compliance.control.kubernetes_cluster_shielded_nodes_enabled
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run gcp_compliance.control.kubernetes_cluster_shielded_nodes_enabled --share
SQL
This control uses a named query:
select self_link resource, case when shielded_nodes_enabled then 'ok' else 'alarm' end as status, case when shielded_nodes_enabled then title || ' shielded nodes enabled.' else title || ' shielded nodes disabled.' end as reason , location as location, project as projectfrom gcp_kubernetes_cluster;