More Info:

Ensure that the endpoint of cluster master in not public

Risk Level

Medium

Address

Security

Compliance Standards

CBP

Triage and Remediation

Remediation

To remediate the misconfiguration “Cluster Master Endpoint Should Not Be Global” for GCP using GCP console, follow the below steps:

  1. Go to the Google Kubernetes Engine (GKE) console.
  2. Select the cluster for which you want to remediate the misconfiguration.
  3. Click on the “Edit” button on the top of the page.
  4. Scroll down to the “Endpoint” section.
  5. Under the “Master endpoint” section, select the “Regional” option.
  6. Select the region where your cluster is located.
  7. Click on the “Save” button to apply the changes.

Once you have completed these steps, your cluster master endpoint will no longer be global and will be limited to the selected region. This will help to reduce the attack surface and improve the security of your GKE cluster.

Additional Reading: