Ensure binary authorization is used

** org.openrewrite.terraform.gcp.EnsureBinaryAuthorizationIsUsed** Ensure binary authorization is used.
Tags
CKV_GCP_66
GCP
terraform
Source
​Github, Issue Tracker, Maven Central​
groupId: org.openrewrite.recipe
artifactId: rewrite-terraform
version: 1.6.0
Usage
This recipe has no required configuration options and can be activated directly after taking a dependency on org.openrewrite.recipe:rewrite-terraform:1.6.0 in your build file:
Gradle
Maven
build.gradle
1
plugins {
2
    id("org.openrewrite.rewrite") version("5.22.2")
3
}
4
​
5
rewrite {
6
    activeRecipe("org.openrewrite.terraform.gcp.EnsureBinaryAuthorizationIsUsed")
7
}
8
​
9
repositories {
10
    mavenCentral()
11
}
12
​
13
dependencies {
14
    rewrite("org.openrewrite.recipe:rewrite-terraform:1.6.0")
15
}
Copied!
pom.xml
1
<project>
2
  <build>
3
    <plugins>
4
      <plugin>
5
        <groupId>org.openrewrite.maven</groupId>
6
        <artifactId>rewrite-maven-plugin</artifactId>
7
        <version>4.25.0</version>
8
        <configuration>
9
          <activeRecipes>
10
            <recipe>org.openrewrite.terraform.gcp.EnsureBinaryAuthorizationIsUsed</recipe>
11
          </activeRecipes>
12
        </configuration>
13
        <dependencies>
14
          <dependency>
15
            <groupId>org.openrewrite.recipe</groupId>
16
            <artifactId>rewrite-terraform</artifactId>
17
            <version>1.6.0</version>
18
          </dependency>
19
        </dependencies>
20
      </plugin>
21
    </plugins>
22
  </build>
23
</project>
Copied!
Recipes can also be activated directly from the command line by adding the argument -Drewrite.activeRecipesorg.openrewrite.terraform.gcp.EnsureBinaryAuthorizationIsUsed
Definition
Recipe List
Yaml Recipe List
​Add Terraform configuration​
resourceName: google_container_cluster
content: enable_binary_authorization = true
1
---
2
type: specs.openrewrite.org/v1beta/recipe
3
name: org.openrewrite.terraform.gcp.EnsureBinaryAuthorizationIsUsed
4
displayName: Ensure binary authorization is used
5
description: Ensure binary authorization is used.
6
tags:
7
  - CKV_GCP_66
8
  - GCP
9
  - terraform
10
recipeList:
11
  - org.openrewrite.terraform.AddConfiguration:
12
      resourceName: google_container_cluster
13
      content: enable_binary_authorization = true
Copied!

Ensure IP forwarding on instances is disabled

Ensure compute instances launch with shielded VM enabled

Last modified 8d ago

Export as PDF

Copy link

Contents