Google Cloud Compliance ControlsGoogle Kubernetes Engine
GKE cluster shielded nodes should have integrity monitoring enabled
This control ensures that GKE clusters shielded nodes integrity monitoring is enabled. Enabling Integrity Monitoring for Shielded GKE Nodes is necessary to be notified of inconsistencies during the node boot sequence.
What this control checks
GKE cluster nodes pass or fail based on their shielded instance integrity monitoring setting
Framework mappings
The clauses this control is mapped to in each framework.
NIST Cybersecurity Framework v2.0
- GV.SC-09: Supply chain security practices are integrated into cybersecurity and enterprise risk management programs, and their performance is monitored throughout the technology product and service life cycle.
- ID.RA-09
- PR.DS-10: The confidentiality, integrity, and availability of data-in-use are protected.
- PR.IR-02
- PR.IR-03
2 more clauses
- PR.PS-01
- PR.PS-03
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
kubernetes_cluster_shielded_instance_integrity_monitoring_enabled - Checkov Check:
CKV_GCP_72 - Powerpipe Control:
gcp_compliance.control.kubernetes_cluster_shielded_instance_integrity_monitoring_enabled - KICS Query:
4b5ee6a4-5682-4725-8a7a-d9e9a51986c8
Last reviewed: 2026-10-09