疑似Oday
Ensure that your Google Kubernetes Engine (GKE) clusters are configured to use user-managed service accounts instead of the default service account managed by Google Cloud. The default service account has broad permissions across your GCP project, which violates the Principle of Least Privilege (POLP).
id: gcloud-gke-default-service-account
info:
name: GKE Clusters Using Default Service Account
a
...