MEDIUM
Source
CloudSploit
ID
automatic-node-upgrades-enabled

Automatic Node Upgrades Enabled

Ensures all Kubernetes cluster nodes have automatic upgrades enabled

Enabling automatic upgrades on nodes ensures that each node stays current with the latest version of the master branch, also ensuring that the latest security patches are installed to provide the most secure environment.

Follow the appropriate remediation steps below to resolve the issue.

  1. Log into the Google Cloud Platform Console.

  2. Scroll down the left navigation panel and choose the “Kubernetes Engine” option under the “Compute” and select the “Clusters.” Step

  3. On the “Kubernetes clusters” page , click on the “Name” as a link option to select the cluster.Step

  4. On the selected “Clusters” page, scroll down and select the “Node pools” by clicking on the “Name” as a link.Step

  5. On the “Node pool details” page, scroll down the page, check “Auto-upgrade” option under the “Management” and if it’s showing “Disabled” then it doesn’t ensures that each node stays current with the latest version of the master branch.Step

  6. Repeat steps number 2 - 5 to verify other clusters in the account.

  7. Navigate to the “Kubernetes Engine” option under the “Compute”, choose the “Clusters” and select the “Node pools” option.Step

  8. On the “Node pool details” page, click on the “Edit” button at the top.Step

  9. On the “Edit node pool” page, scroll down and click on the checkbox next to the “Enable auto-upgrade” under the “Management.”Step

  10. Click on the “Save” button to make the changes.Step

  11. Repeat steps number 7 - 10 to ensure automatic node upgrades are enabled on all node pools in Kubernetes clusters.