Google Cloud Compliance ControlsGoogle Kubernetes Engine
GKE cluster shielded nodes should have secure boot enabled
Checkov CKV_GCP_68 is titled "Ensure Secure Boot for Shielded GKE Nodes is Enabled". The Powerpipe check is titled "GKE clusters shielded node secure boot should be enabled". The control is non-compliant if shielded node secure boot is disabled.
What this control checks
Checks GKE cluster nodes against a secure boot requirement tied to shielded node settings
Framework mappings
The clauses this control is mapped to in each framework.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
kubernetes_cluster_shielded_node_secure_boot_enabled - Checkov Check:
CKV_GCP_68 - Powerpipe Control:
gcp_compliance.control.kubernetes_cluster_shielded_node_secure_boot_enabled
Last reviewed: 2026-10-09