feat(query): implemented query that ensures that integrity monitoring for Shielded GKE Nodes is enabled

[cx-ricardo-jesus]

Closes #

Reason for Proposed Changes

• Currently, no query for Terraform/GCP that ensures integrity monitoring is enabled for Shielded GKE Nodes.

Proposed Changes

• According to the Terraform documentation of the resources google_container_node_pool and google_container_cluster, the field node_config.shielded_instance_config.enable_integrity_monitoring defines if the instance has integrity monitoring enabled for both resources, since in the documentation of the google_container_node_pool there is no documentation for the node_config block, and demands to see the information about this field on the google_container_cluster documentation so, I assumed that the node_config have the same configuration for both resources.
• Also on the documentation, as shown in the screenshot below, it is stated that the default value for the field enable_integrity_monitoring is true.

• Regarding the query, it is composed of only one simple policy that only checks if the field mentioned above is set to true. If that scenario happens, a positive result is returned.

I submit this contribution under the Apache-2.0 license.

[github-actions]

KICS version: v2.1.18

Category Results CRITICAL 0 HIGH 0 MEDIUM 0 LOW 0 INFO 0 TRACE 0 TOTAL 0	Metric Values Files scanned 1 Files parsed 1 Files failed to scan 0 Total executed queries 47 Queries failed to execute 0 Execution time 0

[cx-eduardo-semanas]

LGTM

[cx-eduardo-semanas]

LGTM

[cx-artur-ribeiro]

LGTM