Use Rbac Permissions

Legacy ABAC permissions are enabled.

You should disable Attribute-Based Access Control (ABAC), and instead use Role-Based Access Control (RBAC) in GKE.

RBAC has significant security advantages and is now stable in Kubernetes, so it’s time to disable ABAC.

Impact

ABAC permissions are less secure than RBAC permissions

Recommended Actions

Follow the appropriate remediation steps below to resolve the issue.

1
2
3
4
5
6

 resource "google_container_cluster" "good_example" {
 	# ...
 	# enable_legacy_abac not set
 	# ...
 }
 

Links

• https://cloud.google.com/kubernetes-engine/docs/how-to/hardening-your-cluster#leave_abac_disabled_default_for_110