Google Cloud Compliance ControlsGoogle Kubernetes Engine
GKE clusters should not allow incoming traffic from all sources across the internet
This control checks GKE clusters and confirms they do not allow incoming traffic from all sources across the internet. It flags any cluster whose configuration leaves it reachable from any address, meaning it is open to every source on the internet.
What this control checks
GKE clusters should not allow incoming traffic from all sources across the internet
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
kubernetes_cluster_incoming_traffic_open_to_all - Powerpipe Control:
gcp_compliance.control.kubernetes_cluster_incoming_traffic_open_to_all
Last reviewed: 2026-10-09