Skip to content

Latest commit

 

History

History
28 lines (23 loc) · 2.23 KB

logging-enabled.md

File metadata and controls

28 lines (23 loc) · 2.23 KB
Raw

CloudSploit

GOOGLE / Kubernetes / Logging Enabled

Quick Info
Plugin Title Logging Enabled
Cloud GOOGLE
Category Kubernetes
Description Ensures all Kubernetes clusters have logging enabled
More Info This setting should be enabled to ensure Kubernetes control plane logs are properly recorded.
GOOGLE Link https://cloud.google.com/monitoring/kubernetes-engine/legacy-stackdriver/logging
Recommended Action Ensure that logging is enabled on all Kubernetes clusters.

Detailed Remediation Steps

  1. Log into the Google Cloud Platform Console.
  2. Scroll down the left navigation panel and choose the "Kubernetes Engine" option under the "Compute" and select the "Clusters."
  3. On the "Kubernetes clusters" page , click on the "Name" as a link option to select the cluster.
  4. On the "Clusters" page, click on the "Edit" button at the top.
  5. Scroll down the "Clusters - Edit" page and check whether "Stackdriver Kubernetes Engine Monitoring" is enabled or disabled. If it's set to disabled then it's not as per the best recommended method.
  6. Repeat steps number 2 - 5 to verify other "Clusters" in the account.
  7. Navigate to the "Kubernetes Engine" option under the "Compute", choose the "Clusters" and click on the "Edit" button at the top.
  8. On the "Clusters - Edit" page, scroll down and choose the "System and workload logging and monitoring" option from the dropdown menu next to "Stackdriver Kubernetes Engine Monitoring."
  9. Click on the "Save" button to make the changes.
  10. Repeat steps number 7 - 9 to ensure that logging is enabled on all Kubernetes clusters.