Prisma Cloud Remediation - GCP Kubernetes Engine Misconfiguration v2

This playbook remediates Prisma Cloud GCP Kubernetes Engine alerts. It calls sub-playbooks that perform the actual remediation steps. Remediation: * GCP Kubernetes Engine Clusters Basic Authentication is set to Enabled * GCP Kubernetes Engine Clusters have HTTP load balancing disabled * GCP Kubernetes Engine Clusters have Legacy Authorization enabled * GCP Kubernetes Engine Clusters have Master authorized networks disabled * GCP Kubernetes Engine Clusters have Network policy disabled * GCP Kubernetes Engine Clusters have Stackdriver Logging disabled * GCP Kubernetes Engine Clusters have Stackdriver Monitoring disabled * GCP Kubernetes Engine Clusters have binary authorization disabled * GCP Kubernetes Engine Clusters web UI/Dashboard is set to Enabled * GCP Kubernetes cluster intra-node visibility disabled.

Prisma Cloud by Palo Alto Networks · 12 tasks · 2 inputs · 0 outputs

Inputs

  • policyId — Grab the Prima Cloud policy ID.
  • AutoRemediateKubernetesEngine — Execute GCP Kubernetes Engine remediation automatically?

Commands used

closeInvestigation prisma-cloud-alert-dismiss

Flowchart

yes yes Yes cluster yes yes Start Start Done Done Is there a policy to remediate? Is there a policy to reme... Update Kubernetes Engine automatically? Update Kubernetes Engine ... Auto remediate? Auto remediate? Execute playbook Execute playbook Manually update Kubernetes Engine Manually update Kubernete... Close investigation - closeInvestigation Close investigation closeInvestigation Is Prisma Cloud v2 integration enabled? Is Prisma Cloud v2 integr... Dismiss Prisma Cloud alert - prisma-cloud-alert-dismiss Dismiss Prisma Cloud alert prisma-cloud-alert-dismiss Prisma Cloud Remediation - GCP Kubernetes Engine Cluster Misconfiguration - Prisma Cloud Remediation - GCP Kubernetes Engine Cluster Misconfiguration Prisma Cloud Remediation ... Prisma Cloud Remediation - GC... Is Google Kubernetes Engine integration enabled? Is Google Kubernetes Engi...