turbot/gcp_compliance

Control: GKE clusters should not allow incoming traffic from all sources across the internet

Description

This control ensures that GKE clusters do not allow incoming traffic from all sources across the internet.

Usage

Run the control in your terminal:

powerpipe control run gcp_compliance.control.kubernetes_cluster_incoming_traffic_open_to_all

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run gcp_compliance.control.kubernetes_cluster_incoming_traffic_open_to_all --share

SQL

This control uses a named query:

kubernetes_cluster_incoming_traffic_open_to_all

Tags