Prisma Cloud Remediation - GCP Kubernetes Engine Cluster Misconfiguration

This playbook remediates the following Prisma Cloud GCP Kubernetes Engine Cluster alerts. Prisma Cloud policies remediated: * GCP Kubernetes Engine Clusters Basic Authentication is set to Enabled * GCP Kubernetes Engine Clusters have HTTP load balancing disabled * GCP Kubernetes Engine Clusters have Legacy Authorization enabled * GCP Kubernetes Engine Clusters have Master authorized networks disabled * GCP Kubernetes Engine Clusters have Network policy disabled * GCP Kubernetes Engine Clusters have Stackdriver Logging disabled * GCP Kubernetes Engine Clusters have Stackdriver Monitoring disabled * GCP Kubernetes Engine Clusters have binary authorization disabled * GCP Kubernetes Engine Clusters web UI/Dashboard is set to Enabled * GCP Kubernetes cluster intra-node visibility disabled

Prisma Cloud by Palo Alto Networks · 26 tasks · 1 input · 0 outputs

Inputs

  • policyId — Prisma Cloud policy Id.

Commands used

gcloud-clusters-describe gcloud-clusters-set-addons gcloud-clusters-set-binary-auth gcloud-clusters-set-intra-node-visibility gcloud-clusters-set-k8s-stackdriver gcloud-clusters-set-legacy-auth gcloud-clusters-set-master-authorized-network gcloud-clusters-set-muster-auth

Flowchart

basicAuth binaryAuth dashboard httpLB intraNode legacyAuth logging monitoring networkPolicy networksAuth yes Start Start Done Done Get cluster details - gcloud-clusters-describe Get cluster details gcloud-clusters-describe Execute remediation Execute remediation Stackdriver Logging Disabled Stackdriver Logging Disabled Stackdriver Monitoring Disabled Stackdriver Monitoring Di... UI/Dashboard is Enabled UI/Dashboard is Enabled Basic Auth Enabled Basic Auth Enabled Auth Networks Disabled Auth Networks Disabled Legacy Auth Enabled Legacy Auth Enabled Network Policy Disabled Network Policy Disabled HTTP Load Balacing Disabled HTTP Load Balacing Disabled Binary Auth Disabled Binary Auth Disabled Intra-node Visibility Disabled Intra-node Visibility Dis... Disable basic auth - gcloud-clusters-set-muster-auth Disable basic auth gcloud-clusters-set-muster-auth Disable legacy auth - gcloud-clusters-set-legacy-auth Disable legacy auth gcloud-clusters-set-legacy-auth Enable networks auth - gcloud-clusters-set-master-authorized-network Enable networks auth gcloud-clusters-set-master-au... Enable network policy - gcloud-clusters-set-addons Enable network policy gcloud-clusters-set-addons Enable logging - gcloud-clusters-set-k8s-stackdriver Enable logging gcloud-clusters-set-k8s-stack... Enable monitoring - gcloud-clusters-set-k8s-stackdriver Enable monitoring gcloud-clusters-set-k8s-stack... Enable HTTP load balancing - gcloud-clusters-set-addons Enable HTTP load balancing gcloud-clusters-set-addons Disable UI/Dashboard - gcloud-clusters-set-addons Disable UI/Dashboard gcloud-clusters-set-addons Enable binary auth - gcloud-clusters-set-binary-auth Enable binary auth gcloud-clusters-set-binary-auth Enable intra-node visibility - gcloud-clusters-set-intra-node-visibility Enable intra-node visibility gcloud-clusters-set-intra-nod... Is Google Kubernetes Engine integration enabled? Is Google Kubernetes Engi... Manual update Kubernetes Engine Manual update Kubernetes ...