Control: GCP > Project > Organization Policy > Disable Workload Identity Cluster Creation

Manage the GCP Organization Policy "Disable Workload Identity Cluster Creation" for the project.

This boolean constraint, when set to True, requires that all new GKE clusters have Workload Identity disabled at creation time. Existing GKE clusters with Workload Identity already enabled will continue to work as usual.

By default, Workload Identity can be enabled for any GKE cluster.

Resource Types

This control targets the following resource types:

GCP > Project

Primary Policies

The following policies can be used to configure this control:

Disable Workload Identity Cluster Creation

In Your Workspace

Developers

Control Type URI

tmod:@turbot/gcp-orgpolicy#/control/types/iamDisableWorkloadIdentityClusterCreation

Category URI

tmod:@turbot/turbot#/control/categories/policy

GraphQL

query controlType(id: "tmod:@turbot/gcp-orgpolicy#/control/types/iamDisableWorkloadIdentityClusterCreation") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/gcp-orgpolicy#/control/types/iamDisableWorkloadIdentityClusterCreation'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/gcp-orgpolicy#/control/types/iamDisableWorkloadIdentityClusterCreation"