Kubernetes clusters should have HTTP application routing disabled
This control checks if HTTP application routing is disabled for Kubernetes cluster. The Powerpipe check is titled "Kubernetes clusters HTTP application routing should be disabled". A cluster passes the check when `HTTP application routing` is disabled.
What this control checks
Checks the cluster's HTTP application routing setting
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control azure_compliance.control.kubernetes_cluster_http_application_routing_disabled.
Scans of the Terraform code that flag the same setting before deployment: Checkov check CKV_AZURE_246.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
kubernetes_cluster_http_application_routing_disabled - Checkov Check:
CKV_AZURE_246 - Powerpipe Control:
azure_compliance.control.kubernetes_cluster_http_application_routing_disabled
Last reviewed: 2026-10-13