Policy: GCP > CIS v1 > 7 Kubernetes Engine > 7.06 Ensure Kubernetes web UI / Dashboard is disabled (Scored)

Configures auditing against a CIS Benchmark item.

Level: 1 (Scored)

Dashboard is a web-based Kubernetes user interface. You can use Dashboard to deploy containerized applications to a Kubernetes cluster, troubleshoot your containerized application, and manage the cluster itself along with its attendant resources. You can use Dashboard to get an overview of applications running on your cluster, as well as for creating or modifying individual Kubernetes resources (such as Deployments, Jobs, DaemonSets, etc). For example, you can scale a Deployment, initiate a rolling update, restart a pod or deploy new applications using a deploy wizard.

Targets

This policy targets the following resource types:

Primary Policy

This policy is used with the following primary policy:

GCP > CIS v1 > 7 Kubernetes Engine

Controls

Setting this policy configures this control:

GCP > CIS v1 > 7 Kubernetes Engine > 7.06 Ensure Kubernetes web UI / Dashboard is disabled (Scored)

Policy Specification

Schema Type	`string`
Default	`Per GCP > CIS v1`
Valid Values [YAML]	`Per GCP > CIS v1` `Skip` `Check: Level 1 (Scored)`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/cis#/control/categories/v0704

Policy Type URI

tmod:@turbot/gcp-cisv1#/policy/types/r0706

GraphQL

query policyType(id: "tmod:@turbot/gcp-cisv1#/policy/types/r0706") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/gcp-cisv1#/policy/types/r0706'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/gcp-cisv1#/policy/types/r0706'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/gcp-cisv1#/policy/types/r0706"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/gcp-cisv1#/policy/types/r0706"