> ## Documentation Index
> Fetch the complete documentation index at: https://docs.codeant.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Best practice

<AccordionGroup>
  <Accordion title="gcp-gke-nodepool-auto-repair-enabled">
    Ensure 'Automatic node repair' is enabled for Kubernetes Clusters
  </Accordion>

  <Accordion title="gcp-postgresql-log-lock-waits">
    Ensure PostgreSQL database 'log\_lock\_waits' flag is set to 'on'
  </Accordion>

  <Accordion title="gcp-mysql-local-in-file-off">
    Ensure MySQL database 'local\_infile' flag is set to 'off'
  </Accordion>

  <Accordion title="gcp-gke-use-cos-image">
    Ensure Container-Optimized OS (cos) is used for Kubernetes Engine Clusters Node image
  </Accordion>

  <Accordion title="gcp-compute-template-shielded-vm">
    Ensure Compute instances are launched with Shielded VM enabled
  </Accordion>

  <Accordion title="gcp-gke-alias-ip-enabled">
    Ensure Kubernetes Cluster is created with Alias IP ranges enabled
  </Accordion>

  <Accordion title="gcp-storage-versioning-enabled">
    Ensure Cloud storage has versioning enabled
  </Accordion>

  <Accordion title="gcp-compute-shielded-vm">
    Ensure Compute instances are launched with Shielded VM enabled
  </Accordion>

  <Accordion title="gcp-postgresql-log-disconnection">
    Ensure PostgreSQL database 'log\_disconnections' flag is set to 'on'
  </Accordion>

  <Accordion title="gcp-gke-enable-shielded-nodes">
    Ensure Shielded GKE Nodes are Enabled
  </Accordion>

  <Accordion title="gcp-gke-nodepool-metadata-server-enabled">
    Ensure the GKE Metadata Server is Enabled
  </Accordion>

  <Accordion title="gcp-postgresql-log-min-message">
    Ensure PostgreSQL database 'log\_min\_messages' flag is set to a valid value
  </Accordion>

  <Accordion title="gcp-postgresql-log-temp">
    Ensure PostgreSQL database 'log\_temp\_files' flag is set to '0'
  </Accordion>

  <Accordion title="gcp-postgresql-log-checkpoints">
    Ensure PostgreSQL database 'log\_checkpoints' flag is set to 'on'
  </Accordion>

  <Accordion title="gcp-gke-sql-backup-configuration-enabled">
    Ensure all Cloud SQL database instance have backup configuration enabled
  </Accordion>

  <Accordion title="gcp-gke-binary-authorization">
    Ensure use of Binary Authorization
  </Accordion>

  <Accordion title="gcp-postgresql-log-connection">
    Ensure PostgreSQL database 'log\_connections' flag is set to 'on'
  </Accordion>

  <Accordion title="gcp-postgresql-log-min-duration">
    Ensure PostgreSQL database 'log\_min\_duration\_statement' flag is set to '-1'
  </Accordion>

  <Accordion title="gcp-dnssec-enabled">
    Ensure that RSASHA1 is not used for the zone-signing and key-signing keys in Cloud DNS DNSSEC
  </Accordion>

  <Accordion title="gcp-gke-metadata-server-enabled">
    Ensure the GKE Metadata Server is Enabled
  </Accordion>

  <Accordion title="gcp-gke-nodepool-auto-upgrade-enabled">
    Ensure 'Automatic node upgrade' is enabled for Kubernetes Clusters
  </Accordion>

  <Accordion title="gcp-ipv6-private-google-enabled">
    Ensure that Private google access is enabled for IPV6
  </Accordion>

  <Accordion title="gcp-gke-nodepool-secure-boot-for-shielded-nodes">
    Ensure Secure Boot for Shielded GKE Nodes is Enabled
  </Accordion>

  <Accordion title="gcp-gke-has-labels">
    Ensure Kubernetes Clusters are configured with Labels
  </Accordion>
</AccordionGroup>