Control: Kubernetes clusters upgrade channel should be configured

Description

Ensure Kubernetes clusters upgrade channel is configured. This control is non-compliant if Kubernetes clusters upgrade channel is set to none.

Usage

Run the control in your terminal:

powerpipe control run azure_compliance.control.kubernetes_cluster_upgrade_channel

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run azure_compliance.control.kubernetes_cluster_upgrade_channel --share

SQL

This control uses a named query:

select
  c.id as resource,
  case
    when auto_upgrade_profile ->> 'upgradeChannel' = 'none' then 'alarm'
    else 'ok'
  end as status,
  case
    when auto_upgrade_profile ->> 'upgradeChannel' = 'none' then c.name || ' upgrade channel not configured.'
    else c.name || ' upgrade channel configured.'
  end as reason
  
  , c.resource_group as resource_group
  , sub.display_name as subscription
from
  azure_kubernetes_cluster c,
  azure_subscription sub
where
  sub.subscription_id = c.subscription_id;

Control: Kubernetes clusters upgrade channel should be configured

Description

Usage

SQL

Tags