> ## Documentation Index
> Fetch the complete documentation index at: https://cloudanix.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Kubernetes Audit

## Checks performed

* [Web Dashboard Should Be Disabled](gcpkubemonitoring/rules/k8s_dashboard_disabled)
* [Private Endpoints Should Be Enabled](gcpkubemonitoring/rules/k8s_private_endpoint)
* [Private Cluster Should Be Enabled](gcpkubemonitoring/rules/k8s_private_cluster_enabled)
* [Pod Security Policy Should Be Enabled](gcpkubemonitoring/rules/pod_security_policy_enabled)
* [Network Policy Should Be Enabled](gcpkubemonitoring/rules/k8s_network_policy_enabled)
* [Monitoring Should Be Enabled](gcpkubemonitoring/rules/k8s_monitoring_enabled)
* [Master Authorized Network Should Be Enabled](gcpkubemonitoring/rules/k8s_master_authorized_network)
* [Logging Should Be Enabled](gcpkubemonitoring/rules/k8s_logging_enabled)
* [Legacy Authorization Should Be Disabled](gcpkubemonitoring/rules/k8s_legacy_auth_disabled)
* [Default Service Accounts Should Not Be Used](gcpkubemonitoring/rules/k8s_default_service_account)
* [Container-Optimized OS Should Be Enabled](gcpkubemonitoring/rules/k8s_container_optimized_os_enabled)
* [Cluster Should Have Limited Service Account Access](gcpkubemonitoring/rules/k8s_cluster_least_privilege)
* [Basic Authentication Should Be Disabled](gcpkubemonitoring/rules/k8s_basic_auth_disabled)
* [Automatic Node Upgrades Should Be Enabled](gcpkubemonitoring/rules/k8s_automatic_node_upgrades_enabled)
* [Automatic Node Repair Should Be Enabled](gcpkubemonitoring/rules/k8s_automatic_node_repair_enabled)
* [Alias IP Ranges Should Be Enabled](gcpkubemonitoring/rules/k8s_alias_ip_ranges_enabled)
* [Kubernetes Node Pool Autoscaling Should Be Enabled](gcpkubemonitoring/rules/k8s_nodepool_autoscaling)
* [Kubernetes Boot Disk Should Be Encrypted With Customer Managed Keys](gcpkubemonitoring/rules/k8s_bootdisk_encrypt)
* [Integrity Monitoring Should Be Enabled For Kubernetes Node Pools](gcpkubemonitoring/rules/k8s_integrity_monitoring)
* [Secure Boot Should Be Enabled For Kubernetes Node Pools](gcpkubemonitoring/rules/k8s_secure_boot)
* [Shielded Nodes Should Be Used For Kubernetes Cluster](gcpkubemonitoring/rules/k8s_shielded_nodes)
* [Autoscaling Profile For Clusters Should Be Set To Optimize\_Utilization or Balanced](gcpkubemonitoring/rules/k8s_optimal_cluster_use)
* [Cluster Master Endpoint Should Not Be Global](gcpkubemonitoring/rules/k8_cluster_master_global_access)
* [Latest Kubernetes Version Should Be Used](gcpkubemonitoring/rules/k8_master_cluster_version)
* [Client Certificate Authentication Should Not Be Used For Users](gcpkubemonitoring/rules/k8s_client_certificate_authentication)
* [Ensure Image Vulnerability Scanning Is Performed](gcpkubemonitoring/rules/k8s_image_vulnerability_scanning)
* [Minimize Cluster Access To Read-Only For GCR](gcpkubemonitoring/rules/k8s_cluster_access_gcr)
* [Minimize Container Registries To Only Approved Ones](gcpkubemonitoring/rules/k8s_container_registries_those_approved)
* [Ensure GKE Clusters Are Not Using Default Service Account](gcpkubemonitoring/rules/k8s_compute_engine_default_service_account)
* [Use Dedicated GCP Service Accounts And Workload Identity For Clusters](gcpkubemonitoring/rules/k8s_service_accounts_workload_identity)
* [Ensure Kubernetes Secrets Are Encrypted Using KMS Keys](gcpkubemonitoring/rules/k8s_secrets_encrypted_keys_managed)
* [Ensure Legacy Compute Engine Instance Metadata APIs Are Disabled](gcpkubemonitoring/rules/k8s_compute_engine_instance_metadata_apis_disabled)
* [Ensure The GKE Metadata Server Is Enabled](gcpkubemonitoring/rules/k8s_metadata_server_enabled)
* [Ensure Clusters Use Stable Release Channels](gcpkubemonitoring/rules/k8s_version_management_using_release_channels)
* [Ensure Integrity Monitoring For Shielded GKE Nodes Is Enabled](gcpkubemonitoring/rules/k8s_integrity_monitoring_shielded_nodes_enabled)
* [Enable VPC Flow Logs And Intranode Visibility](gcpkubemonitoring/rules/k8s_enable_vpc_flow_logs_intranode_visibility)
* [Ensure Use Of VPC-Native Clusters](gcpkubemonitoring/rules/k8s_use_vpc_native_clusters)
* [Ensure Stackdriver Kubernetes Logging And Monitoring Is Enabled](gcpkubemonitoring/rules/k8s_stackdriver_logging_monitoring_enabled)
* [Ensure Authentication Using Client Certificates Is Disabled](gcpkubemonitoring/rules/k8s_authentication_client_certificates_disabled)
* [Manage Kubernetes RBAC Users With Google Groups](gcpkubemonitoring/rules/k8s_rbac_users_google_groups)
* [Ensure Kubernetes Web UI Is Disabled](gcpkubemonitoring/rules/k8s_web_ui_disabled)
* [Ensure Alpha Clusters Are Not Used For Production](gcpkubemonitoring/rules/k8s_alpha_clusters_production_workloads)
* [Consider GKE Sandbox For Running Untrusted Workloads](gcpkubemonitoring/rules/k8s_sandbox_running_untrusted)
* [Ensure Use Of Binary Authorization](gcpkubemonitoring/rules/k8s_binary_authorization)
* [Schedule Maintenance Windows And Exclusions](gcpkubemonitoring/rules/k8s_cluster_maintenance_window)
* [Upgrades And Updates Should Be Enabled](gcpkubemonitoring/rules/k8s_cluster_receive_updates)
* [Control Plane Endpoint Access Should Be Limited To Authorized Networks](gcpkubemonitoring/rules/k8s_control_plane_access)
* [Enable Regional Redundancy For Maximum Availability](gcpkubemonitoring/rules/k8s_control_plane_redundancy)
* [For Large Clusters L4 ILB Subsetting Should Be Used](gcpkubemonitoring/rules/k8s_enable_ilb_subsetting)
* [Clusters Should Have Network Policies Or Dataplane V2 Enabled](gcpkubemonitoring/rules/k8s_network_policies_engine)
* [Cluster Should Use Node Local DNS Cache](gcpkubemonitoring/rules/k8s_node_local_dns_cache)
* [Node Pools Should Be Regional For High Availability](gcpkubemonitoring/rules/k8s_node_pool_multi_zone)
* [Workload Identity Should Be Enabled](gcpkubemonitoring/rules/k8s_workload_identity)