Enable Master Authorized Networks on GKE

This CLI command requires 'container.clusters.update' permission. Successful execution will enable Master authorized network for GCP Kubernetes Engine cluster by blocking untrusted non-GCP source IPs from accessing the Kubernetes master through HTTPS.

Cloud Security Posture Management Playbooks

Details

IDc15609b20077311db8762f3fdede96c2
Suggestion ReasonRecommended for remediating GCP Kubernetes Engine Clusters with Master authorized networks disabled

Source

Trigger_-_Enable_Master_Authorized_Networks_on_GKE.json
Download History Raw 
{
  "trigger_id": "c15609b20077311db8762f3fdede96c2",
  "playbook_id": "",
  "suggestion_reason": "Recommended for remediating GCP Kubernetes Engine Clusters with Master authorized networks disabled",
  "description": "This CLI command requires 'container.clusters.update' permission. Successful execution will enable Master authorized network for GCP Kubernetes Engine cluster by blocking untrusted non-GCP source IPs from accessing the Kubernetes master through HTTPS.",
  "trigger_name": "Enable Master Authorized Networks on GKE",
  "automation_type": "command",
  "automation_id": "gcp-container-cluster-security-update-enable-master-authorized-networks-on-gke-quick-action",
  "alerts_filter": {
    "filter": {
      "OR": [
        {
          "SEARCH_FIELD": "matching_service_rule_id",
          "SEARCH_TYPE": "EQ",
          "SEARCH_VALUE": "1bf2e381-28ab-4354-9f00-920d200be18f"
        }
      ]
    }
  }
}