Skip to main content

Maintain Supported Cluster Components

CCC.K8S.CN09 · Resource

Keep control-plane, worker, runtime, and extension components within supported and vulnerability-managed release lifecycles.

Related Capabilities

IDTitleDescription
CCC.K8S.CP02Managed Worker PoolsThe service can organize worker nodes into managed pools that provide Kubernetes with compute capacity for scheduling and running containerized workloads.
CCC.K8S.CP03Abstracted Worker InfrastructureThe service may be configured to abstract worker infrastructure so that provisioning, scaling, patching, and replacement occur without exposing individual nodes to the user.
CCC.K8S.CP15Cluster Version ManagementThe service may be configured with upgrade channels and maintenance settings that keep control-plane and worker components within provider-defined compatibility and support periods.

Related Threats

IDTitleDescription
CCC.K8S.TH09Unsupported Cluster Components Remain in UseControl-plane, worker, runtime, or extension versions outside their supported lifecycles may retain known vulnerabilities and compatibility defects. Exposed components can then be exploited or may fail during service changes, leading to data exposure, loss of cluster-state integrity, or workload interruption.

Assessment Requirements

IDTextApplicability
CCC.K8S.CN09.AR01When a cluster is operational, its Kubernetes control-plane version, worker version, node image, and container runtime MUST remain within the CSP's current support lifecycle.tlp-clear, tlp-green, tlp-amber, tlp-red
CCC.K8S.CN09.AR02Managed cluster components and worker-node images MUST incorporate published security updates through a supported update or replacement mechanism.tlp-green, tlp-amber, tlp-red
CCC.K8S.CN09.AR03When a cluster add-on or extension is installed, its version MUST be compatible with the active Kubernetes version and remain supported by its publisher.tlp-clear, tlp-green, tlp-amber, tlp-red

Guideline Mappings

FrameworkIDRemarks
NIST_800_53CM-8System Component Inventory
NIST_800_53SI-2Flaw Remediation