EKS Clusters Should Use The Latest Stable Version of Kubernetes
More Info:
Amazon Elastic Kubernetes Service (EKS) clusters should be using the latest stable version of Kubernetes container-orchestration system, in order to follow AWS best practices, receive the latest Kubernetes features, design updates and bug fixes, and benefit from better security and performance.Risk Level
LowAddress
Security, Reliability, PerformanceCompliance Standards
HIPAA, AWSWAF, HITRUST, NISTCSFTriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration “EKS Clusters Should Use The Latest Stable Version of Kubernetes” for AWS using the AWS console, follow the steps below:
- Log in to the AWS Management Console.
- Navigate to the Amazon EKS console.
- Select the EKS cluster that you want to update.
- Click on the “Update” button to update the cluster.
- In the “Update EKS Cluster” dialog box, select the latest stable version of Kubernetes from the “Kubernetes version” dropdown menu.
- Click on the “Next” button.
- Review the changes and click on the “Update” button to apply the changes.
Using CLI
Using CLI
To remediate this misconfiguration for AWS EKS using AWS CLI, follow these steps:
- Open the AWS CLI and ensure that you have the necessary permissions to make changes to the EKS cluster.
-
Check the current version of Kubernetes that is being used by the EKS cluster. Use the following command:
-
Check the latest stable version of Kubernetes available for EKS. You can find this information in the AWS documentation or by using the following command:
-
If the current version of Kubernetes is not the latest stable version, update the EKS cluster to use the latest version. Use the following command:
Replace
<cluster-name>with the name of your EKS cluster and<latest-version>with the latest stable version of Kubernetes available for EKS. -
Wait for the update to complete. You can check the status of the update using the following command:
Replace
<cluster-name>with the name of your EKS cluster and<update-id>with the ID of the update. -
Once the update is complete, verify that the EKS cluster is now using the latest stable version of Kubernetes. Use the following command:
The output should show the latest version of Kubernetes that you specified in step 4.
Using Python
Using Python
To remediate this misconfiguration for AWS EKS clusters using Python, you can follow the below steps:Step 1: Install the AWS SDK for Python (Boto3) using the following command:Step 2: Use the Boto3 EKS client to describe the cluster and get the current Kubernetes version. You can use the following code snippet:Step 3: Use the Boto3 EKS client to update the Kubernetes version of the cluster to the latest stable version. You can use the following code snippet:Step 4: Verify that the Kubernetes version has been updated successfully by describing the cluster again. You can use the same code snippet as in Step 2.Once you have completed these steps, you will have remediated the misconfiguration by updating the Kubernetes version of the AWS EKS cluster to the latest stable version.