GKE clusters should have a release channel configured
Validates that a GKE cluster is subscribed to the `Regular` or `Stable` release channel. Subscribing automates version upgrades to the GKE cluster and reduces the complexity of managing Kubernetes versions manually, per KICS guidance.
Release Channel should be subscribed to Regular or Stable to automate version upgrades to the GKE cluster and to reduce version management complexity to the number of features and level of stability required.
What this control checks
GKE cluster has a release_channel subscribed to REGULAR or STABLE.
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control gcp_compliance.control.kubernetes_cluster_release_channel_configured.
Scans of the Terraform code that flag the same setting before deployment: KICS query "Beta - Ensure GKE Version Management Is Automated Using Release Channels" (c1701dcf-24df-4675-b863-340233c4e34f).
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
kubernetes_cluster_release_channel_configured - Powerpipe Control:
gcp_compliance.control.kubernetes_cluster_release_channel_configured - KICS Query:
c1701dcf-24df-4675-b863-340233c4e34f
Last reviewed: 2026-10-09