Description

Google Kubernetes Engine (GKE) Security Posture provides built-in capabilities to assess and improve the security of your clusters. It identifies configuration issues, workload vulnerabilities, and other risks. Enabling Security Posture (mode BASIC or ENTERPRISE) helps you proactively detect and remediate security concerns across your GKE workloads.

The cluster’s security_posture_config.mode is set to BASIC or ENTERPRISE. Clusters where the mode is DISABLED or where the security_posture_config is absent will fail.

Rationale

Without Security Posture enabled, configuration weaknesses and vulnerabilities in your cluster and workloads may go unnoticed, increasing the risk of compromise. Enabling Security Posture provides continuous visibility into the security state of your GKE environment.

Remediation

Enable Security Posture (Basic or Enterprise tier) on the cluster from the Security section of the cluster settings, or with gcloud container clusters update. See Configure security posture for clusters for the full procedure.

Note: The gcloud --security-posture=standard value maps to the BASIC API mode (security_posture_config.mode). The ENTERPRISE mode is provisioned for clusters enrolled in GKE Enterprise rather than via this flag; both BASIC and ENTERPRISE satisfy this rule.

References

• About security posture in GKE
• Configure security posture for clusters