Ensure HTTP load balancing is enabled for Google Container Cluster

MEDIUM

Description

This setting is enabled by default and would only be disabled if an administrator changed the configuration. For more information on how to manage HTTP load balancing with Terraform, see the Google Provider documentation.
References:
https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/container_cluster#http_load_balancing

Remediation

In GCP Console -

  1. Open the GCP Portal and Go to the Google Kubernetes Engine (GKE).
  2. Select the cluster you want to edit.
  3. Click details, Under Networking in HTTP Load Balancing click on edit HTTP Load Balancing.
  4. Select the Enable HTTP load balancing checkbox.
  5. Click Save Changes.

In Terraform -

  1. In the google_container_cluster resource, set the attribute http_load_balancing to true in the addons_config block.

References:
https://cloud.google.com/kubernetes-engine/docs/how-to/shielded-gke-nodes
https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/container_cluster#enable_secure_boot

Policy Details

Rule Reference ID: AC_GCP_0244
CSP: GCP
Remediation Available: Yes
Domain: Resilience
Resource Category: Compute

Frameworks