AKS Cluster Without Upgrade Channel misconfiguration detected in code

AKS Cluster Without Upgrade Channel misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AZURE_171
Category - Subcategory	Public Exposure - VPC VCN VNet
Provider	AZURE
Severity	LOW
Framework	ARM, Bicep, Terraform, Terraform Plan

Impact

Ensure AKS cluster upgrade channel is chosen

How to Fix

Resource: azurerm_kubernetes_cluster

• Arguments: automatic_upgrade_channel [source,go]

---

resource "azurerm_kubernetes_cluster" "example" { name = "example-aks1" location = azurerm_resource_group.example.location resource_group_name = azurerm_resource_group.example.name

If using azurerm version below 4.0

• automatic_channel_upgrade = "stable"

If using azurerm version 4.0 and above

• automatic_upgrade_channel = "stable"

default_node_pool { name = "default" node_count = 1 vm_size = "Standard_D2_v2" }

identity { type = "SystemAssigned" }

tags = { Environment = "production" } }