turbot/steampipe-mod-gcp-compliance

Create queries for GKE CIS v1.3.0

Closed this issue · 7 comments

See discussion in #117 (moving to issue so the information in the PR isn't lost)

I agree that referencing to the Kubernetes mod where applicable helps along with the Corresponding Cloud queries. However I think handling the config files might be challenging as the access requirements are not the same.

@saisirishreddy I think we can start off with GCP specific queries in the GKE CIS mod, so a user would only need to setup the GCP plugin connections. We can also add the Kubernetes queries, and then if a user sets up a Kubernetes plugin connection (or multiple), those Kubernetes controls will run; else, those controls will have no results.

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 30 days.

@cbruno10 would GKE CIS be a new mod..? or a subset in steampipe-mod-gcp-compliance.

@saisirishreddy I think GKE CIS would most likely be another mod, as it contains different types of queries that are worth separating out. This would also reduce the plugin dependency requirements in the GCP Compliance mod, i.e., the Kubernetes plugin would not be required in the GCP Compliance mod, which is helpful since only GKE controls would need that plugin.

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 30 days.

AS per the discussion, I believe, we do not the GKE queries in the GCP mod. Closing this issue.