feat(query): implemented query that ensures that kubernetes web ui is disabled (field deprecated)

[cx-ricardo-jesus]

Reason for Proposed Changes

• Currently, no query covers the case when the Kubernetes Web UI (Dashboard) is not disabled for Terraform/GCP.

Proposed Changes

• The query only has one simple policy, which only checks if the field addons_config.kubernetes_dashboard.disabled is defined to false.
• If this kubernetes_dashboard is not defined, the default behaviour is to disable de dashboard, which should not be flagged.
• Important note is that this field was removed in version 3.0.0 of Terraform/GCP google_container_cluster resource, which was released approximately 6 years ago.
• Taking into account that this field is just flagged if it's defined to false, and its absence does not return any result, it will not return any positive result on the most recent versions of this resource.
• Regarding the query itself, it will flag the cases when a resource of type google_container_cluster does not have the block addons_config defined or when the addon kubernetes_dashboard is not defined inside the addons_config block. Both these cases are only flagged when the GKE version is under 1.10 using the value present on the min_master_version field. For versions above or equal to 1.10, it will not return any result since in these versions, the kubernetes_dashboard is disabled by default.
• No matter the version, the query will also return a positive result if the field addons_config.kubernetes_dashboard.disabled is set to false.

I submit this contribution under the Apache-2.0 license.

[github-actions]

KICS version: v2.1.18

Category Results CRITICAL 0 HIGH 0 MEDIUM 0 LOW 0 INFO 0 TRACE 0 TOTAL 0	Metric Values Files scanned 1 Files parsed 1 Files failed to scan 0 Total executed queries 47 Queries failed to execute 0 Execution time 0

[cx-miguel-dasilva]

Hi @cx-ricardo-jesus,
Nice detail on query logic and version specifics. Great Work!
Please take a look at my comments.

[cx-miguel-dasilva]

Great Work!