Keep control-plane, worker, runtime, and extension components within supported and vulnerability-managed release lifecycles.
Maintain Supported Cluster Components
CCC.K8S.CN09 · Resource
Related Capabilities
| ID | Title | Description |
|---|---|---|
| CCC.K8S.CP02 | Managed Worker Pools | The service can organize worker nodes into managed pools that provide Kubernetes with compute capacity for scheduling and running containerized workloads. |
| CCC.K8S.CP03 | Abstracted Worker Infrastructure | The service may be configured to abstract worker infrastructure so that provisioning, scaling, patching, and replacement occur without exposing individual nodes to the user. |
| CCC.K8S.CP15 | Cluster Version Management | The service may be configured with upgrade channels and maintenance settings that keep control-plane and worker components within provider-defined compatibility and support periods. |
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.K8S.TH09 | Unsupported Cluster Components Remain in Use | Control-plane, worker, runtime, or extension versions outside their supported lifecycles may retain known vulnerabilities and compatibility defects. Exposed components can then be exploited or may fail during service changes, leading to data exposure, loss of cluster-state integrity, or workload interruption. |
Assessment Requirements
| ID | Text | Applicability |
|---|---|---|
| CCC.K8S.CN09.AR01 | When a cluster is operational, its Kubernetes control-plane version, worker version, node image, and container runtime MUST remain within the CSP's current support lifecycle. | tlp-clear, tlp-green, tlp-amber, tlp-red |
| CCC.K8S.CN09.AR02 | Managed cluster components and worker-node images MUST incorporate published security updates through a supported update or replacement mechanism. | tlp-green, tlp-amber, tlp-red |
| CCC.K8S.CN09.AR03 | When a cluster add-on or extension is installed, its version MUST be compatible with the active Kubernetes version and remain supported by its publisher. | tlp-clear, tlp-green, tlp-amber, tlp-red |