Quick Info
| Plugin Title | Logging Enabled |
| Cloud | |
| Category | Kubernetes |
| Description | Ensures all Kubernetes clusters have logging enabled |
| More Info | This setting should be enabled to ensure Kubernetes control plane logs are properly recorded. |
| GOOGLE Link | https://cloud.google.com/monitoring/kubernetes-engine/legacy-stackdriver/logging |
| Recommended Action | Ensure that logging is enabled on all Kubernetes clusters. |
Detailed Remediation Steps
- Log into the Google Cloud Platform Console.
- Scroll down the left navigation panel and choose the “Kubernetes Engine” option under the “Compute” and select the “Clusters.”
- On the “Kubernetes clusters” page , click on the “Name” as a link option to select the cluster.
- On the “Clusters” page, click on the “Edit” button at the top.
- Scroll down the “Clusters - Edit” page and check whether “Stackdriver Kubernetes Engine Monitoring” is enabled or disabled. If it’s set to disabled then it’s not as per the best recommended method.
- Repeat steps number 2 - 5 to verify other “Clusters” in the account.
- Navigate to the “Kubernetes Engine” option under the “Compute”, choose the “Clusters” and click on the “Edit” button at the top.
- On the “Clusters - Edit” page, scroll down and choose the “System and workload logging and monitoring” option from the dropdown menu next to “Stackdriver Kubernetes Engine Monitoring."
- Click on the “Save” button to make the changes.
- Repeat steps number 7 - 9 to ensure that logging is enabled on all Kubernetes clusters.