🛡️ AWS EKS Cluster Kubernetes version is outside standard support🟢

• Contextual name: 🛡️ Cluster Kubernetes version is outside standard support🟢
• ID: /ce/ca/aws/eks/cluster-version-support
• Tags:
  • 🟢 Policy with categories
  • 🟢 Policy with type
  • 🟢 Production policy
• Policy Type: COMPLIANCE_POLICY
• Policy Categories: RELIABILITY

Stats

not available

Logic

• 🧠 prod.logic.yaml🟢
  • 📗 AWS EKS Cluster
  • 🔌 AWS EKS Cluster - object.extracts.yaml
  • 🧪 test-data.json

Description

Open File

Description

This policy checks the Kubernetes minor version of an Amazon EKS cluster control plane against the AWS EKS release and support calendar. Support dates are determined by the Version field. Platform Version identifies the platform family so that legacy Outposts local clusters can be excluded; its revision number does not determine Kubernetes support.

Rationale

Keeping control planes within standard support provides time for tested upgrades and avoids extended-support charges and eventual automatic upgrades. AWS continues to maintain Kubernetes versions beyond upstream support, so the upstream Kubernetes lifecycle alone does not determine EKS support. Extended support includes security patches and technical support; entering it does not mean the version is unsupported or unpatched.

Impact

Extended support provides continued AWS support for an additional charge. Reaching the end of standard support is therefore distinct from reaching the final support cutoff. After final support ends, AWS gradually upgrades remaining control planes; a retained CMDB version should be verified against AWS before remediation.

... see more

Remediation

Open File

Remediation

Upgrade the EKS control plane to a Kubernetes minor version within AWS standard support.

1. Confirm the current Kubernetes version and cluster status with aws eks describe-cluster. For a version past final support, check whether AWS has already started or completed an automatic upgrade. Wait for any update to finish and confirm the cluster is ACTIVE before proceeding.
2. Choose a version in STANDARD_SUPPORT from aws eks describe-cluster-versions --region {{region-name}} --include-all, using the returned versionStatus and support dates. Plan the path to that target one minor version at a time.
3. Review EKS upgrade insights, release notes, removed APIs, and workload compatibility. Check node, add-on, client, and admission webhook compatibility for each upgrade. Test the sequence in a representative environment and prepare application and data recovery procedures.
4. Upgrade to the next approved Kubernetes minor version:

... see more

policy.yaml

Open File

Linked Framework Sections

Section	Sub Sections	Internal Rules	Policies	Flags	Compliance
💼 Cloudaware Framework → 💼 Infrastructure Modernization			39		no data