Google > Kubernetes >

Node Encryption Enabled

HIGH

Source

CloudSploit

node-encryption-enabled

management console

Node Encryption Enabled

Ensure that GKE cluster nodes are encrypted using desired encryption protection level.

Using Customer Managed Keys (CMKs) gives you better control over the encryption/decryption process of your cluster nodes.

Recommended Actions

Ensure that all node pools in GKE clusters have the desired encryption level.

Links

https://cloud.google.com/security/encryption/default-encryption

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.