Google Cloud Compliance ControlsGoogle Kubernetes Engine
GKE node pools should all have automatic node repair enabled
Checks that GKE node pools have automatic node repair enabled. Automatic repair will monitor nodes and attempt repair when a node fails multiple subsequent health checks. The Terraform check inspects `google_container_node_pool`.
What this control checks
GKE node pools must have auto_repair enabled in management
Framework mappings
The clauses this control is mapped to in each framework.
NIST Cybersecurity Framework v2.0
- PR.IR-03
- PR.IR-04
- PR.PS-02
- Develop configuration standards for all system components
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
enable_auto_repair - Checkov Check:
CKV_GCP_9 - Powerpipe Control:
gcp_compliance.control.enable_auto_repair - Trivy Check:
GCP-0063
Last reviewed: 2026-10-09