HIGH
Source
Trivy
ID
AVD-GCP-0061

Master authorized networks should be configured on GKE clusters

Enabling authorized networks means you can restrict master access to a fixed set of CIDR ranges

Impact

Follow the appropriate remediation steps below to resolve the issue.

Enable master authorized networks

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
resource "google_container_cluster" "good_example" {
  name     = "my-gke-cluster"
  location = "us-central1"
  master_authorized_networks_config {
    cidr_blocks {
      cidr_block   = "10.10.128.0/24"
      display_name = "internal"
    }
  }
}