Cluster Master Endpoint Should Not Be Global
More Info:
Ensure that the endpoint of cluster master in not publicRisk Level
MediumAddress
SecurityCompliance Standards
CBPTriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration “Cluster Master Endpoint Should Not Be Global” for GCP using GCP console, follow the below steps:
- Go to the Google Kubernetes Engine (GKE) console.
- Select the cluster for which you want to remediate the misconfiguration.
- Click on the “Edit” button on the top of the page.
- Scroll down to the “Endpoint” section.
- Under the “Master endpoint” section, select the “Regional” option.
- Select the region where your cluster is located.
- Click on the “Save” button to apply the changes.
Using CLI
Using CLI
To remediate the misconfiguration “Cluster Master Endpoint Should Not Be Global” for GCP using GCP CLI, follow the below steps:Replace [CLUSTER_NAME] and [ZONE] with your cluster name and zone respectively.If the endpoint is not global, you will see the regional endpoint in the output.By following these steps, you will remediate the misconfiguration “Cluster Master Endpoint Should Not Be Global” for GCP using GCP CLI.
- Open the Google Cloud Console and navigate to the Kubernetes Engine.
- Select the cluster that you want to remediate.
- Click on the “Edit” button at the top of the page.
- Scroll down to the “Master endpoint” section.
- Click on the “Customize” button next to the “Master endpoint” field.
- Select “Regional” from the dropdown menu.
- Choose the region where you want to create the endpoint.
- Click on the “Save” button.
- Verify that the endpoint has been updated to the regional endpoint by running the following command in the GCP CLI:
- Ensure that the endpoint is not global by running the following command:
Using Python
Using Python
To remediate the misconfiguration “Cluster Master Endpoint Should Not Be Global” for GCP using Python, you can follow the below steps:Step 1: Install the necessary librariesStep 2: Import the necessary librariesStep 3: Set up the credentials for authenticationStep 4: Create a client object for the Container APIStep 5: Get the cluster detailsStep 6: Check if the master endpoint is globalStep 7: Verify if the master endpoint is updated to regionalBy following these steps, you can remediate the misconfiguration “Cluster Master Endpoint Should Not Be Global” for GCP using Python.