Google Cloud Compliance ControlsGoogle Kubernetes Engine
GKE clusters should have network policy enabled
Checkov CKV_GCP_12 looks for network policy configuration on `google_container_cluster` resources. Trivy GCP-0056 states that enabling a network policy allows the segregation of network traffic by namespace within the cluster.
What this control checks
GKE clusters must have network policy enabled or use ADVANCED_DATAPATH
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
gcp_kubernetes_cluster_network_policy_enabled - Checkov Check:
CKV_GCP_12 - Powerpipe Control:
gcp_compliance.control.kubernetes_cluster_network_policy_enabled - Trivy Check:
GCP-0056
Last reviewed: 2026-10-09