GKE clusters should not use default network
This control ensures that GKE clusters do not use the `default` network. It looks at the network each GKE cluster is configured with and verifies that the network is not the `default` network, so a cluster that uses the `default` network does not pass.
What this control checks
GKE clusters should not use default network
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control gcp_compliance.control.kubernetes_cluster_no_default_network.
Framework-specific interpretation
NIST Cybersecurity Framework v2.0: Mapped to PR.IR-01 (Networks and environments are protected from unauthorized logical access and usage.).
Framework mappings
The clauses this control is mapped to in each framework.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
kubernetes_cluster_no_default_network - Powerpipe Control:
gcp_compliance.control.kubernetes_cluster_no_default_network
Last reviewed: 2026-10-09