feat(query): implemented query that ensures that kubernetes web ui is disabled (field deprecated)

assets/queries/terraform/gcp/kubernetes_web_ui_is_not_disabled/metadata.json

@@ -0,0 +1,14 @@
+{
+  "id": "ced11de2-e701-4e63-83ab-4fdb1ab8c5dd",
+  "queryName": "Beta - Kubernetes Web UI Is Not Disabled",
+  "severity": "LOW",
+  "category": "Insecure Configurations",
+  "descriptionText": "Kubernetes Web UI (Dashboard) should be disabled when running on Kubernetes Engine",
+  "descriptionUrl": "https://registry.terraform.io/providers/hashicorp/google/2.20.3/docs/resources/container_cluster#kubernetes_dashboard-4",
+  "platform": "Terraform",
+  "descriptionID": "ced11de2",
+  "cloudProvider": "gcp",
+  "cwe": "250",
+  "riskScore": "1.0",
+  "experimental": "true"
+}

assets/queries/terraform/gcp/kubernetes_web_ui_is_not_disabled/query.rego

@@ -0,0 +1,22 @@
+package Cx
+
+import data.generic.common as common_lib
+import data.generic.terraform as tf_lib
+
+# this query checks a value in a field that was removed on the version 3.0.0 of the resource
+CxPolicy[result] {
+    resource := input.document[i].resource.google_container_cluster[name]
+
+    resource.addons_config.kubernetes_dashboard.disabled == false
+
+    result := {
+        "documentId": input.document[i].id,
+        "resourceType": "google_container_cluster",
+        "resourceName": tf_lib.get_resource_name(resource, name),
+        "searchKey": sprintf("google_container_cluster[%s].addons_config.kubernetes_dashboard.disabled", [name]),
+        "issueType": "IncorrectValue",
+        "keyExpectedValue": "'kuberneters_dashboard' should not be enabled inside the 'addons_config block'",
+        "keyActualValue": "'kuberneters_dashboard' is enabled inside the 'addons_config block'",
+        "searchLine": common_lib.build_search_line(["resource", "google_container_cluster", name, "addons_config", "kubernetes_dashboard", "disabled"], [])
+    }
+}

assets/queries/terraform/gcp/kubernetes_web_ui_is_not_disabled/test/negative1.tf

@@ -0,0 +1,5 @@
+resource "google_container_cluster" "negative1" {
+  name               = "marcellus-wallace"
+  location           = "us-central1-a"
+  initial_node_count = 3
+}

assets/queries/terraform/gcp/kubernetes_web_ui_is_not_disabled/test/negative2.tf

@@ -0,0 +1,11 @@
+resource "google_container_cluster" "negative2" {
+  name               = "marcellus-wallace"
+  location           = "us-central1-a"
+  initial_node_count = 3
+
+  addons_config {
+    kubernetes_dashboard {
+        disabled = true
+    }
+  }
+}

assets/queries/terraform/gcp/kubernetes_web_ui_is_not_disabled/test/positive.tf

@@ -0,0 +1,11 @@
+resource "google_container_cluster" "positive" {
+  name               = "marcellus-wallace"
+  location           = "us-central1-a"
+  initial_node_count = 3
+
+  addons_config {
+    kubernetes_dashboard {
+        disabled = false
+    }
+  }
+}

assets/queries/terraform/gcp/kubernetes_web_ui_is_not_disabled/test/positive_expected_result.json

@@ -0,0 +1,8 @@
+[
+  {
+    "queryName": "Beta - Kubernetes Web UI Is Not Disabled",
+    "severity": "LOW",
+    "line": 8,
+    "fileName": "positive.tf"
+  }
+]

assets/similarityID_transition/terraform_gcp.yaml

@@ -63,3 +63,7 @@ similarityIDChangeList:
       queryName: Beta - SQL DB Instance With Exposed Show Privileges
       observations: ""
       change: 2
+    - queryId: ced11de2-e701-4e63-83ab-4fdb1ab8c5dd
+      queryName: Beta - Kubernetes Web UI Is Not Disabled
+      observations: ""
+      change: 2