Automatic Node Repair Should Be Enabled
More Info:
Ensures all Kubernetes cluster nodes have automatic repair enabled. When automatic repair on nodes is enabled, the Kubernetes engine performs health checks on all nodes, automatically repairing nodes that fail health checks. This ensures that the Kubernetes environment stays optimal.Risk Level
LowAddress
Security, ReliabilityCompliance Standards
NISTCSFTriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration “Automatic Node Repair Should Be Enabled” for GCP, you can follow these steps using the GCP Console:
- Open the GCP Console and go to the “Kubernetes Engine” section.
- Select the cluster that you want to remediate.
- Click on the “Edit” button at the top of the page.
- Scroll down to the “Node Pools” section and click on the node pool that you want to remediate.
- Scroll down to the “Node auto-repair” option and toggle it on.
- Click on the “Save” button at the bottom of the page to apply the changes.
Using CLI
Using CLI
To remediate the misconfiguration “Automatic Node Repair Should Be Enabled” in GCP using GCP CLI, follow the steps below:Replace Replace This command will show you the status of automatic node repair for the specified node pool.By following these steps, you can remediate the misconfiguration “Automatic Node Repair Should Be Enabled” in GCP using GCP CLI.
- Open the Cloud Shell in your GCP console.
- Run the following command to enable automatic node repair for all node pools in a specific cluster:
[CLUSTER_NAME] with the name of the cluster where you want to enable automatic node repair.- If you want to enable automatic node repair for a specific node pool in a cluster, run the following command:
[NODE_POOL_NAME] with the name of the node pool where you want to enable automatic node repair, and [CLUSTER_NAME] with the name of the cluster where the node pool is located.- Verify that automatic node repair is enabled by running the following command:
Using Python
Using Python
To remediate the misconfiguration of “Automatic Node Repair Should Be Enabled” for GCP using Python, you can follow the below steps:By following these steps, you can remediate the misconfiguration of “Automatic Node Repair Should Be Enabled” for GCP using Python.
- Import the necessary modules:
- Set the project ID and zone where the misconfiguration exists:
- Create a client object to authenticate with the GCP API:
- Get the instance group manager resource:
- Check if the “autoHealingPolicies” field exists in the instance group manager resource:
- Create an auto-healing policy dictionary object:
- Append the auto-healing policy to the instance group manager’s “autoHealingPolicies” field:
- Update the instance group manager resource with the new auto-healing policy: