Logging and monitoring

GKE not using Stackdriver Kubernetes Logging and Monitoring

Risk Level

Informational (4)

Platform(s)
Compliance Frameworks

Description

Exporting logs and metrics to a dedicated, persistent datastore such as Stackdriver ensures availability of audit data following a cluster security event, and provides a central location for analysis of log and metric data collated from multiple sources. It was detected that {GcpGkeCluster} does not use Stackdriver service for logging and monitoring.
  • Recommended Mitigation

    Consider Enabling Stackdriver Monitoring and logging for {GcpGkeCluster}. For more info: <a href="https://cloud.google.com/stackdriver/docs/solutions/gke" target="_blank" rel="noopener noreferrer">https://cloud.google.com/stackdriver/docs/solutions/gke</a>