Google Cloud Compliance ControlsGoogle Kubernetes Engine
GKE nodes should have automatic node upgrades enabled
Checks that 'Automatic node upgrade' is enabled for Kubernetes Clusters. Kubernetes nodes must have auto upgrades set to true. Automatic updates keep nodes updated with the latest cluster master version.
What this control checks
Node 'auto_upgrade' must be enabled (true) for Kubernetes Clusters node pools
Framework mappings
The clauses this control is mapped to in each framework.
NIST Cybersecurity Framework v2.0
- PR.IR-03
- PR.IR-04
- PR.PS-02
- Develop configuration standards for all system components
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
enable_auto_upgrade - Checkov Check:
CKV_GCP_10 - Powerpipe Control:
gcp_compliance.control.enable_auto_upgrade - KICS Query:
b139213e-7d24-49c2-8025-c18faa21ecaa - Trivy Check:
GCP-0058
Last reviewed: 2026-10-09