Ensure the GKE metadata server is enabled

** org.openrewrite.terraform.gcp.EnsureTheGKEMetadataServerIsEnabled** Ensure the GKE metadata server is enabled.
Tags
GCP
CKV_GCP_69
terraform
Source
​Github, Issue Tracker, Maven Central​
groupId: org.openrewrite.recipe
artifactId: rewrite-terraform
version: 1.6.0
Usage
This recipe has no required configuration options and can be activated directly after taking a dependency on org.openrewrite.recipe:rewrite-terraform:1.6.0 in your build file:
Gradle
Maven
build.gradle
1
plugins {
2
    id("org.openrewrite.rewrite") version("5.22.2")
3
}
4
​
5
rewrite {
6
    activeRecipe("org.openrewrite.terraform.gcp.EnsureTheGKEMetadataServerIsEnabled")
7
}
8
​
9
repositories {
10
    mavenCentral()
11
}
12
​
13
dependencies {
14
    rewrite("org.openrewrite.recipe:rewrite-terraform:1.6.0")
15
}
Copied!
pom.xml
1
<project>
2
  <build>
3
    <plugins>
4
      <plugin>
5
        <groupId>org.openrewrite.maven</groupId>
6
        <artifactId>rewrite-maven-plugin</artifactId>
7
        <version>4.25.0</version>
8
        <configuration>
9
          <activeRecipes>
10
            <recipe>org.openrewrite.terraform.gcp.EnsureTheGKEMetadataServerIsEnabled</recipe>
11
          </activeRecipes>
12
        </configuration>
13
        <dependencies>
14
          <dependency>
15
            <groupId>org.openrewrite.recipe</groupId>
16
            <artifactId>rewrite-terraform</artifactId>
17
            <version>1.6.0</version>
18
          </dependency>
19
        </dependencies>
20
      </plugin>
21
    </plugins>
22
  </build>
23
</project>
Copied!
Recipes can also be activated directly from the command line by adding the argument -Drewrite.activeRecipesorg.openrewrite.terraform.gcp.EnsureTheGKEMetadataServerIsEnabled
Definition
Recipe List
Yaml Recipe List
​Add Terraform configuration​
resourceName: google_container_cluster
content: node_config { workload_metadata_config { node_metadata = "GKE_METADATA_SERVER" } }
​Add Terraform configuration​
resourceName: google_container_node_pool
content: node_config { workload_metadata_config { node_metadata = "GKE_METADATA_SERVER" } }
1
---
2
type: specs.openrewrite.org/v1beta/recipe
3
name: org.openrewrite.terraform.gcp.EnsureTheGKEMetadataServerIsEnabled
4
displayName: Ensure the GKE metadata server is enabled
5
description: Ensure the GKE metadata server is enabled.
6
tags:
7
  - GCP
8
  - CKV_GCP_69
9
  - terraform
10
recipeList:
11
  - org.openrewrite.terraform.AddConfiguration:
12
      resourceName: google_container_cluster
13
      content: node_config {
14
  workload_metadata_config {
15
    node_metadata = "GKE_METADATA_SERVER"
16
  }
17
}
18
  - org.openrewrite.terraform.AddConfiguration:
19
      resourceName: google_container_node_pool
20
      content: node_config {
21
  workload_metadata_config {
22
    node_metadata = "GKE_METADATA_SERVER"
23
  }
24
}
Copied!

Ensure shielded GKE nodes are enabled

Last modified 8d ago

Export as PDF

Copy link

Contents