Google has found that some Google Kubernetes Engine (GKE) customers delay security patching their clusters, citing concerns over interrupting production operations.
- This delay increases the risk customers face.
- GKE customers can mitigate this by configuring and orchestrating their Kubernetes environments, specifying appropriate maintenance windows, and using notification and scanning services to find vulnerabilities.
Customers can review suggested solutions for balancing availability and security patching, such as utilizing regularly-occurring maintenance windows, setting up regional clusters, and using the security posture dashboard (SPD).
