Azure Compliance ControlsAzure Kubernetes Service
Kubernetes clusters should have an upgrade channel configured
Evaluates AKS clusters to check whether an automatic upgrade channel is set. A cluster passes the check when its upgrade channel has a value other than `none`, so that the cluster receives Kubernetes version updates automatically.
What this control checks
AKS cluster upgrade channel must be set to a value other than none.
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
kubernetes_cluster_upgrade_channel - Checkov Check:
CKV_AZURE_171 - Powerpipe Control:
azure_compliance.control.kubernetes_cluster_upgrade_channel - Prowler Check:
aks_cluster_auto_upgrade_enabled
Last reviewed: 2026-10-13