Ensure that the Auto-Upgrade feature is enabled for all the nodes running within your Google Kubernetes Engine (GKE) clusters. This feature helps you keep your cluster nodes up to date with the latest supported version of Kubernetes.
excellence
Enabling auto-upgrades for your GKE cluster nodes can help ease the upgrade management process by automatically and securely upgrading Kubernetes to the newest supported version in order to take advantage of the latest Kubernetes security fixes and/or new functionalities and features.
Audit
To determine if your Google Kubernetes Engine (GKE) cluster nodes are using automatic upgrades, perform the following actions:
Remediation / Resolution
To enable Auto-Upgrade feature for your Google Kubernetes Engine (GKE) cluster nodes, perform the following actions:
References
- Google Cloud Platform (GCP) Documentation
- Google Kubernetes Engine
- Auto-upgrading nodes
- GCP Command Line Interface (CLI) Documentation
- gcloud projects list
- gcloud container clusters list
- gcloud container node-pools list
- gcloud container node-pools describe
- gcloud container node-pools update
Unlock the Remediation Steps
Free 30-day Trial
Automatically audit your configurations with Conformity
and gain access to our cloud security platform.
You are auditing:
Enable Auto-Upgrade for GKE Cluster Nodes
Risk Level: Medium