Added GKE Benchmark 1.4 Controls

[spawar-apex]

• Added Node CoS & Cluster Intranode Visibility control to the GKE Policies.

[google-cla]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

[mikouaj]

Hi @spawar-apex, thank you for this great contribution on intranode visibility policy!

FYI the table in a gke-policies-v2/README.md file can be generated automatically by running generate policy-docs command, i.e:

./gke-policy generate policy-docs -local-policy-dir ./gke-policies-v2 -f generated-policy-docs.md

The generated table takes policies and their metadata from a given directory. This helps to avoid human errors. For instance, I think that Container-Optimized OS policy was already in this README.md as Use Container-Optimized OS.

[spawar-apex]

Hi @spawar-apex, thank you for this great contribution on intranode visibility policy!

FYI the table in a gke-policies-v2/README.md file can be generated automatically by running generate policy-docs command, i.e:

./gke-policy generate policy-docs -local-policy-dir ./gke-policies-v2 -f generated-policy-docs.md

The generated table takes policies and their metadata from a given directory. This helps to avoid human errors. For instance, I think that Container-Optimized OS policy was already in this README.md as Use Container-Optimized OS.

Thank you @mikouaj for sharing the details. I'll make necessary updates and push the PR.

[mikouaj]

Thanks @spawar-apex, please do not commit the generated-policy-docs.md file. Simply copy the content of the generated file to the gke-policies-v2/README.md instead, below the
<!-- BEGIN POLICY-DOC --> statement.

[mikouaj]

I agree that the process can be unclear, I will add necessary instruction to the policy authoring guide.

[spawar-apex]

I agree that the process can be unclear, I will add necessary instruction to the policy authoring guide.

oh.ok. Sure. Thanks @mikouaj .
Let me unversion generated-policy-docs.md and add the contents to the README.md and push the PR again.

[mikouaj]

Great job @spawar-apex, thank you for this contribution!