Policy Packs

Ensure that secrets, such as passwords and API keys, are encrypted, thereby safeguarding them from unauthorized access and potential breaches.

Enforce Encryption for Secrets Is Enabled for GCP GKE Clusters

main

gcp_kubernetesengine_region_cluster_approved

Determine the action to take when a GCP Kubernetes Engine region cluster is not approved based on `GCP &gt; Kubernetes Engine &gt; Region Cluster &gt; Approved &gt; *` policies.&#92;n&#92;nThe Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.&#92;n&#92;nFor any enforcement actions that specify `if new`, e.g., `Enforce: Delete unapproved if new`, this control will only take the enforcement actions for resources created within the last 60 minutes.&#92;n&#92;nSee [Approved](https://turbot.com/guardrails/docs/concepts/guardrails/approved) for more information.&#92;n

regionClusterApproved

GCP > Kubernetes Engine > Region Cluster > Approved

gcp_kubernetesengine_region_cluster_approved_custom

Determine whether the GCP Kubernetes Engine region cluster is allowed to exist.&#92;nThis policy will be evaluated by the Approved control. If a GCP Kubernetes Engine region cluster is not approved, it will be subject to the action specified in the `GCP &gt; Kubernetes Engine &gt; Region Cluster &gt; Approved` policy.&#92;nSee [Approved](https://turbot.com/guardrails/docs/concepts/guardrails/approved) for more information.&#92;n&#92;n**Note**: The policy value must be a string with a value of `Approved`, `Not approved` or `Skip`, or in the form of YAML objects. The object(s) must contain the key `result` with its value as `Approved` or `Not approved`. A custom title and message can also be added using the keys `title` and `message` respectively.&#92;n

regionClusterApprovedCustom

GCP > Kubernetes Engine > Region Cluster > Approved > Custom

gcp_kubernetesengine_zone_cluster_approved

Determine the action to take when a GCP Kubernetes Engine zone cluster is not approved based on `GCP &gt; Kubernetes Engine &gt; Zone Cluster &gt; Approved &gt; *` policies.&#92;n&#92;nThe Approved control checks the status of the defined Approved sub-policies for the resource. If the resource is not approved according to any of these policies, this control raises an alarm and takes the defined enforcement action.&#92;n&#92;nFor any enforcement actions that specify `if new`, e.g., `Enforce: Delete unapproved if new`, this control will only take the enforcement actions for resources created within the last 60 minutes.&#92;n&#92;nSee [Approved](https://turbot.com/guardrails/docs/concepts/guardrails/approved) for more information.&#92;n

zoneClusterApproved

GCP > Kubernetes Engine > Zone Cluster > Approved

gcp_kubernetesengine_zone_cluster_approved_custom

Determine whether the GCP Kubernetes Engine zone cluster is allowed to exist.&#92;nThis policy will be evaluated by the Approved control. If a GCP Kubernetes Engine zone cluster is not approved, it will be subject to the action specified in the `GCP &gt; Kubernetes Engine &gt; Zone Cluster &gt; Approved` policy.&#92;nSee [Approved](https://turbot.com/guardrails/docs/concepts/guardrails/approved) for more information.&#92;n&#92;n**Note**: The policy value must be a string with a value of `Approved`, `Not approved` or `Skip`, or in the form of YAML objects. The object(s) must contain the key `result` with its value as `Approved` or `Not approved`. A custom title and message can also be added using the keys `title` and `message` respectively.&#92;n

Policy	Setting	Note
GCP > Kubernetes Engine > Region Cluster > Approved	Check: Approved
GCP > Kubernetes Engine > Region Cluster > Approved > Custom	Calculated
GCP > Kubernetes Engine > Zone Cluster > Approved	Check: Approved
GCP > Kubernetes Engine > Zone Cluster > Approved > Custom	Calculated

Policy Settings