Enable PodSecurityPolicy controller on Google Kubernetes Engine (GKE) clusters

** org.openrewrite.terraform.gcp.EnablePodSecurityPolicyControllerOnGKEClusters** Ensure PodSecurityPolicy controller is enabled on Google Kubernetes Engine (GKE) clusters.
Tags
GCP
CKV_GCP_24
terraform
Source
​Github, Issue Tracker, Maven Central​
groupId: org.openrewrite.recipe
artifactId: rewrite-terraform
version: 1.6.0
Usage
This recipe has no required configuration options and can be activated directly after taking a dependency on org.openrewrite.recipe:rewrite-terraform:1.6.0 in your build file:
Gradle
Maven
build.gradle
1
plugins {
2
    id("org.openrewrite.rewrite") version("5.22.2")
3
}
4
​
5
rewrite {
6
    activeRecipe("org.openrewrite.terraform.gcp.EnablePodSecurityPolicyControllerOnGKEClusters")
7
}
8
​
9
repositories {
10
    mavenCentral()
11
}
12
​
13
dependencies {
14
    rewrite("org.openrewrite.recipe:rewrite-terraform:1.6.0")
15
}
Copied!
pom.xml
1
<project>
2
  <build>
3
    <plugins>
4
      <plugin>
5
        <groupId>org.openrewrite.maven</groupId>
6
        <artifactId>rewrite-maven-plugin</artifactId>
7
        <version>4.25.0</version>
8
        <configuration>
9
          <activeRecipes>
10
            <recipe>org.openrewrite.terraform.gcp.EnablePodSecurityPolicyControllerOnGKEClusters</recipe>
11
          </activeRecipes>
12
        </configuration>
13
        <dependencies>
14
          <dependency>
15
            <groupId>org.openrewrite.recipe</groupId>
16
            <artifactId>rewrite-terraform</artifactId>
17
            <version>1.6.0</version>
18
          </dependency>
19
        </dependencies>
20
      </plugin>
21
    </plugins>
22
  </build>
23
</project>
Copied!
Recipes can also be activated directly from the command line by adding the argument -Drewrite.activeRecipesorg.openrewrite.terraform.gcp.EnablePodSecurityPolicyControllerOnGKEClusters
Definition
Recipe List
Yaml Recipe List
​Add Terraform configuration​
resourceName: google_container_cluster
content: pod_security_policy_config { enabled = true }
1
---
2
type: specs.openrewrite.org/v1beta/recipe
3
name: org.openrewrite.terraform.gcp.EnablePodSecurityPolicyControllerOnGKEClusters
4
displayName: Enable `PodSecurityPolicy` controller on Google Kubernetes Engine (GKE) clusters
5
description: Ensure `PodSecurityPolicy` controller is enabled on Google Kubernetes Engine (GKE) clusters.
6
tags:
7
  - GCP
8
  - CKV_GCP_24
9
  - terraform
10
recipeList:
11
  - org.openrewrite.terraform.AddConfiguration:
12
      resourceName: google_container_cluster
13
      content: pod_security_policy_config {
14
  enabled = true
15
}
Copied!

Best practices for GCP

Enable VPC Flow Logs for subnetworks

Last modified 8d ago

Export as PDF

Copy link

Contents