The GKE control plane is exposed to the public internet by default.
GKE control plane exposed to public internet
Use private nodes and master authorised networks to prevent exposure
The following example will fail the google-gke-no-public-control-plane check.
The following example will pass the google-gke-no-public-control-plane check.