Vendor services misconfigurations

GKE with Web UI enabled

Risk Level

Informational (4)

Platform(s)

Description

The Kubernetes Web UI (Dashboard) has been a historical source of vulnerability and should only be deployed when necessary. It was detected that {GcpGkeCluster} has the Web UI enabled.
  • Recommended Mitigation

    It is recommended to disable the Kubernetes Web UI (Dashboard) on {GcpGkeCluster}. For more info: <a href="https://cloud.google.com/kubernetes-engine/docs/how-to/hardening-your-cluster#disable_kubernetes_dashboard" target="_blank" rel="noopener noreferrer">https://cloud.google.com/kubernetes-engine/docs/how-to/hardening-your-cluster#disable_kubernetes_dashboard</a>