Google Cloud Compliance ControlsGoogle Kubernetes Engine
GKE clusters should have private nodes configured
Trivy GCP-0059 says enabling private nodes ensures the nodes are only available internally, as they will only be assigned internal addresses. KICS says clusters must be created as Private Clusters, rather than public ones.
What this control checks
Checks whether a cluster has private nodes configured
Framework mappings
The clauses this control is mapped to in each framework.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
kubernetes_cluster_private_nodes_configured - Powerpipe Control:
gcp_compliance.control.kubernetes_cluster_private_nodes_configured - KICS Query:
6ccb85d7-0420-4907-9380-50313f80946b - Trivy Check:
GCP-0059
Last reviewed: 2026-10-09