Clusters Should Have Network Policies Or Dataplane V2 Enabled
More Info:
GKE cluster should have Network Policies or Dataplane V2 enabledRisk Level
HighAddress
Performance Efficiency, Operational Excellence, Reliability, SecurityCompliance Standards
CBPTriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration “Clusters should have network policies or dataplane v2 enabled” in GCP using the GCP console, you can follow the below steps:
- Login to GCP console (https://console.cloud.google.com/).
- Navigate to the Kubernetes Engine section in the left-hand menu.
- Select the cluster that needs to be remediated.
- Click on the Edit button at the top of the page.
- Scroll down to the Networking section and click on the checkbox next to “Enable Network Policy Enforcement”.
- If you want to enable Dataplane V2, click on the checkbox next to “Enable Dataplane V2”.
- Click on the Save button at the bottom of the page.
- Wait for the changes to take effect. It may take a few minutes for the changes to propagate across the cluster.
Using CLI
Using CLI
To remediate the misconfiguration “Clusters Should Have Network Policies Or Dataplane V2 Enabled” for GCP using GCP CLI, you can follow the below steps:Replace CLUSTER_NAME with the name of your GCP cluster and ZONE with the zone in which the cluster is located.This command should return the output “dataplaneV2Enabled: true”.This command should return the output “networkPolicyConfig: enabled: true”.After following these steps, the misconfiguration “Clusters Should Have Network Policies Or Dataplane V2 Enabled” should be remediated for your GCP cluster.
- Open the GCP Cloud Shell.
- Run the following command to enable the Dataplane V2 API:
- After the command executes successfully, verify that the Dataplane V2 API is enabled by running the following command:
- To enable network policies for the cluster, run the following command:
- Verify that network policies are enabled by running the following command:
Using Python
Using Python
To remediate the misconfiguration “Clusters Should Have Network Policies Or Dataplane V2 Enabled” in GCP using python, you can follow the below steps:
- First, you need to authenticate to GCP using a service account. You can create a service account and download the key file from the GCP console.
- Next, you need to get the list of clusters in the project.
- For each cluster, you need to check if network policies or dataplane v2 is enabled. If not, you need to enable it.
- Finally, you can run the python script to remediate the misconfiguration.