Google Cloud Compliance ControlsGoogle Kubernetes Engine
GKE clusters with less than three nodes should have auto upgrade enabled
Evaluates Google Kubernetes Engine clusters in the kubernetes_cluster_with_less_than_three_node_auto_upgrade_enabled check and inspects the node pool management settings to see whether `auto upgrade` is enabled on smaller clusters.
What this control checks
GKE clusters with less than three nodes should have auto upgrade enabled
Framework mappings
The clauses this control is mapped to in each framework.
NIST Cybersecurity Framework v2.0
- PR.IR-03
- PR.IR-04
- PR.PS-02
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
kubernetes_cluster_with_less_than_three_node_auto_upgrade_enabled - Powerpipe Control:
gcp_compliance.control.kubernetes_cluster_with_less_than_three_node_auto_upgrade_enabled
Last reviewed: 2026-10-09