Enable GKE Cluster Intra-node Visibility

This CLI command requires 'container.clusters.update' permission. Successful execution will enable intra-node visibility for GCP Kubernetes Engine cluster which helps visualize flow logs for all traffic between Pods.

Cloud Security Posture Management Playbooks

Details

ID43fae7b767fb9d9aed62239f6b618fe3
Suggestion ReasonRecommended for remediating GCP Kubernetes cluster with intra-node visibility disabled

Source

Trigger_-_Enable_GKE_Cluster_Intra-node_Visibility.json
Download History Raw 
{
  "trigger_id": "43fae7b767fb9d9aed62239f6b618fe3",
  "playbook_id": "",
  "suggestion_reason": "Recommended for remediating GCP Kubernetes cluster with intra-node visibility disabled",
  "description": "This CLI command requires 'container.clusters.update' permission. Successful execution will enable intra-node visibility for GCP Kubernetes Engine cluster which helps visualize flow logs for all traffic between Pods.",
  "trigger_name": "Enable GKE Cluster Intra-node Visibility",
  "automation_type": "command",
  "automation_id": "gcp-container-cluster-security-update-enable-gke-cluster-intra-node-visibility-quick-action",
  "alerts_filter": {
    "filter": {
      "OR": [
        {
          "SEARCH_FIELD": "matching_service_rule_id",
          "SEARCH_TYPE": "EQ",
          "SEARCH_VALUE": "21c101a0-ef0f-46b6-901e-7284abc6258a"
        }
      ]
    }
  }
}