Shielded Nodes Should Be Used For Kubernetes Cluster
More Info:
Ensure that shielded nodes are used in node poolsRisk Level
MediumAddress
Security, Reliability, Operational ExcellenceCompliance Standards
CISGKETriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration of not using Shielded Nodes for a Kubernetes Cluster in GCP, you can follow the below steps using GCP console:
- Go to the GCP Console and select the Kubernetes Engine from the navigation menu.
- Select the Kubernetes Cluster for which you want to enable Shielded Nodes.
- Click on the Edit button at the top of the page.
- Scroll down to the Node Pools section and click on the node pool name for which you want to enable Shielded Nodes.
- In the Node Pool edit page, scroll down to the Security section and enable the Shielded Nodes option.
- Click on the Save button to save the changes.
Using CLI
Using CLI
To remediate the misconfiguration of using shielded nodes for a Kubernetes cluster on GCP using GCP CLI, you can follow the below steps:
- First, you need to check if the Kubernetes cluster is using shielded nodes or not. To check this, run the following command:
- If the output of the above command shows that shielded nodes are not enabled, then you can enable it by running the following command:
- If the output of the above command shows an error message saying that the beta component is not enabled, then you need to enable it by running the following command:
- Once the beta component is installed, you can run the previous command again to enable the shielded nodes.
- After enabling the shielded nodes, you can verify it by running the first command again. The output should show that shielded nodes are enabled for the Kubernetes cluster.
Using Python
Using Python
To remediate the misconfiguration of not using shielded nodes for a Kubernetes cluster in GCP using Python, follow these steps:This command should return “True” indicating that the shielded nodes are enabled for the cluster.This command will update the existing cluster to enable shielded nodes.By following these steps, the misconfiguration of not using shielded nodes for a Kubernetes cluster in GCP can be remediated using Python.
- Install the Google Cloud SDK and Python client library using the following commands:
- Create a new GCP project or select an existing project to work with.
- Enable the necessary APIs for the project using the following command:
- Authenticate the SDK using the following command:
- Create a new Kubernetes cluster using the following command:
- Verify that the shielded nodes are enabled for the cluster using the following command:
- If you have an existing cluster, you can update the cluster to enable shielded nodes using the following command: