Ensure Clusters Use Stable Release Channels
More Info:
Subscribe to the Regular or Stable Release Channel to automate version upgrades to the GKE cluster and to reduce version management complexity to the number of features and level of stability required.Risk Level
MediumAddress
Security, Reliability, Operational Excellence, Best PracticeCompliance Standards
CISGKETriage and Remediation
Remediation
Using Console
Using Console
To remediate the misconfiguration “Ensure Clusters Use Stable Release Channels” for GCP using GCP console, follow the below steps:
- Open the GCP console and navigate to the Kubernetes Engine page.
- Select the cluster that you want to remediate.
- Click on the “Edit” button at the top of the page.
- In the “Cluster version and upgrade settings” section, select “Stable channel” from the “Release channel” drop-down menu.
- Click on the “Save” button to apply the changes.
- Repeat the above steps for all the clusters in your GCP environment.
Using CLI
Using CLI
To remediate the issue of ensuring clusters use stable release channels in GCP using GCP CLI, follow the below steps:Step 1: Open the Cloud ShellStep 2: Run the following command to set the project ID:Step 3: Verify that you have the Kubernetes Engine API enabled for your project by running the following command:Step 4: Run the following command to get the current release channel of the cluster:Step 5: Run the following command to update the release channel to stable:Step 6: Verify that the release channel has been updated by running the following command:This should remediate the issue of ensuring clusters use stable release channels in GCP using GCP CLI.
Using Python
Using Python
To remediate the misconfiguration “Ensure Clusters Use Stable Release Channels” in GCP using Python, you can follow the below steps:
-
First, you need to install the
google-cloud-containerlibrary using the following command: -
Next, you need to authenticate with GCP using your service account key. You can use the following code to authenticate:
-
Once you are authenticated, you can use the
google.cloud.container_v1.ClusterManagerClientclass to get the list of clusters in your GCP project. You can use the following code to get the list of clusters: -
After getting the list of clusters, you can check if each cluster is using the stable release channel or not. If any cluster is not using the stable release channel, you can update the cluster to use the stable release channel. You can use the following code to update the cluster:
- Finally, you can verify that all the clusters are now using the stable release channel by running the code in step 3 again.