Add Framework support for GKE

[AdonisOkpidi]

Overview

Our project requires installing Kubescape in both GKE and AKS. However, there is currently no dedicated GKE framework available in Kubescape.

Problem

To meet the project requirements, I am planning on creating a privileged pod to use alongside the CIS v1.23 and AllControls Kubescape frameworks (Which will already be filtered pending feature request) While this approach works, it requires manually filtering reports to exclude controls not relating to GKE. Introducing a specific framework for GKE would significantly reduce this effort, as most necessary controls already exist, with the exception of those related to Managed Services compliance.

Solution

Develop a GKE-specific framework similar to the cis-aks-t1.2.0 framework in kubescape for AKS. This tailored framework would simplify compliance processes, eliminate the need for manual filtering, and ensure a smoother integration of GKE-specific controls.

[slashben]

Hey @AdonisOkpidi , to clarify: are you looking for CIS GKE framework (like the one mentioned here or here )?

[AdonisOkpidi]

@slashben Yes correct! You can find the details on the official website CIS workbench. The current version is v1.7.0. You can create a free account with a non org email address.

As part of the benchmark there is a Managed services section (screenshot below) for GKE specific compliance.

[AdonisOkpidi]

@slashben Happy new year.

I am just checking in to see the timeline of this?

[slashben]

Happy New Year to you too! We are waiting for a contributor on this therefore regreably I don't have an ETA :-(

…

On Mon, Jan 6, 2025, 19:13 AdonisOkpidi ***@***.***> wrote: @slashben <https://github.com/slashben> Happy new year. I am just checking in to see the timeline of this? — Reply to this email directly, view it on GitHub <#567 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AODLOPQSRXUD4I2B4OQAKOT2JK2UPAVCNFSM6AAAAABTQAAHSGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDKNZTGU2DOOJRHE> . You are receiving this because you were mentioned.Message ID: ***@***.***>