GKE clusters with less than three nodes should have auto upgrade enabled
Evaluates Google Kubernetes Engine clusters in the kubernetes_cluster_with_less_than_three_node_auto_upgrade_enabled check and inspects the node pool management settings to see whether `auto upgrade` is enabled on smaller clusters.
What this control checks
GKE clusters with less than three nodes should have auto upgrade enabled
Audit evidence
Evidence that deployed resources meet this control: PowerPipe control gcp_compliance.control.kubernetes_cluster_with_less_than_three_node_auto_upgrade_enabled.
Framework-specific interpretation
NIST Cybersecurity Framework v2.0: Mapped to PR.IR-03 (Mechanisms are implemented to achieve resilience requirements in normal and adverse situations.), PR.IR-04 (Adequate resource capacity to ensure availability is maintained.) and PR.PS-02 (Software is maintained, replaced, and removed commensurate with risk.).
Framework mappings
The clauses this control is mapped to in each framework.
NIST Cybersecurity Framework v2.0
- PR.IR-03
- PR.IR-04
- PR.PS-02
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
kubernetes_cluster_with_less_than_three_node_auto_upgrade_enabled - Powerpipe Control:
gcp_compliance.control.kubernetes_cluster_with_less_than_three_node_auto_upgrade_enabled
Last reviewed: 2026-10-09