turbot/gcp_compliance

Query: kubernetes_cluster_binary_authorization_enabled

Usage

powerpipe query gcp_compliance.query.kubernetes_cluster_binary_authorization_enabled

Steampipe Tables

SQL

select
self_link resource,
case
when binary_authorization is null
or (binary_authorization ->> 'evaluationMode') ilike 'DISABLED'
or (binary_authorization ->> 'evaluationMode') ilike 'EVALUATION_MODE_UNSPECIFIED' then 'alarm'
else 'ok'
end as status,
case
when binary_authorization is null
or (binary_authorization ->> 'evaluationMode') ilike 'DISABLED'
or (binary_authorization ->> 'evaluationMode') ilike 'EVALUATION_MODE_UNSPECIFIED' then title || ' binary authorization disabled.'
else title || ' binary authorization enabled.'
end as reason,
location as location,
project as project
from
gcp_kubernetes_cluster;

Controls

The query is being used by the following controls: