GKE Pollicy Controller Fleet Default Bundle

describe.yaml

# gcloud container fleet policycontroller describe
# https://console.cloud.google.com/kubernetes/features/policy/configuration
createTime: '2025-02-18T21:05:33.021592569Z'
fleetDefaultMemberConfig:
  policycontroller:
    policyControllerHubConfig:
      auditIntervalSeconds: '60'
      constraintViolationLimit: '40'
      deploymentConfigs:
        admission:
          podAffinity: ANTI_AFFINITY
      installSpec: INSTALL_SPEC_ENABLED
      monitoring:
        backends:
        - PROMETHEUS
        - CLOUD_MONITORING
      policyContent:
        bundles:
          cis-k8s-v1.5.1: {}
          policy-essentials-v2022: {}
        templateLibrary:
          installation: ALL
      referentialRulesEnabled: true
    version: 1.20.1
membershipSpecs:
  projects/503076227230/locations/us-central1/memberships/gke-iowa:
    origin:
      type: FLEET
    policycontroller:
      policyControllerHubConfig:
        auditIntervalSeconds: '60'
        constraintViolationLimit: '40'
        deploymentConfigs:
          admission:
            podAffinity: ANTI_AFFINITY
        installSpec: INSTALL_SPEC_ENABLED
        monitoring:
          backends:
          - PROMETHEUS
          - CLOUD_MONITORING
        policyContent:
          bundles:
            cis-k8s-v1.5.1: {}
            policy-essentials-v2022: {}
          templateLibrary:
            installation: ALL
        referentialRulesEnabled: true
      version: 1.20.1
membershipStates:
  projects/503076227230/locations/us-central1/memberships/gke-iowa:
    policycontroller:
      componentStates:
        admission:
          details: 1.20.1
          state: ACTIVE
        audit:
          details: 'deployment in progress: Pending termination: 1'
          state: UPDATING
        mutation:
          details: 'deployment not installed: resource is missing'
          state: NOT_INSTALLED
      policyContentState:
        bundleStates:
          asm-policy-v0.0.1:
            state: NOT_INSTALLED
          cis-gke-v1.5.0:
            state: NOT_INSTALLED
          cis-k8s-v1.5.1:
            state: ACTIVE
          cost-reliability-v2023:
            state: NOT_INSTALLED
          nist-sp-800-190:
            state: NOT_INSTALLED
          nist-sp-800-53-r5:
            state: NOT_INSTALLED
          nsa-cisa-k8s-v1.2:
            state: NOT_INSTALLED
          pci-dss-v3.2.1:
            state: NOT_INSTALLED
          pci-dss-v3.2.1-extended:
            state: NOT_INSTALLED
          pci-dss-v4.0:
            state: NOT_INSTALLED
          policy-essentials-v2022:
            state: ACTIVE
          psp-v2022:
            state: NOT_INSTALLED
          pss-baseline-v2022:
            state: NOT_INSTALLED
          pss-restricted-v2022:
            state: NOT_INSTALLED
        referentialSyncConfigState:
          state: ACTIVE
        templateLibraryState:
          state: ACTIVE
      state: UPDATING
    state:
      code: OK
      updateTime: '2025-03-24T18:48:40.867586936Z'
name: projects/gregbray-vpc/locations/global/features/policycontroller
resourceState:
  state: ACTIVE
spec: {}
updateTime: '2025-03-24T22:20:29.084024844Z'