Revision 1.1Sep 15, 2026

Informational Update
  • 4.1.10 Avoid non-default bindings to system:authenticated
  • 4.1.9 Avoid non-default bindings to system:unauthenticated
  • 5.10.2 Ensure that Alpha clusters are not used for production workloads
  • 5.2.1 Ensure GKE clusters are not running using the Compute Engine default service account
  • 5.5.4 When creating New Clusters - Automate GKE version management using Release Channels
  • 5.7.1 Ensure Logging and Cloud Monitoring is Enabled
  • 5.8.3 Ensure Legacy Authorization (ABAC) is Disabled
Miscellaneous
  • Audit deprecated.
  • Metadata updated.
  • References updated.