Skip to content

fix(terraform): update CKV_AWS_339 supported EKS Kubernetes versions - #7664

Open
Ishihab wants to merge 1 commit into
bridgecrewio:mainfrom
Ishihab:fix/ckv-aws-339-eks-versions
Open

fix(terraform): update CKV_AWS_339 supported EKS Kubernetes versions#7664
Ishihab wants to merge 1 commit into
bridgecrewio:mainfrom
Ishihab:fix/ckv-aws-339-eks-versions

Conversation

@Ishihab

@Ishihab Ishihab commented Aug 27, 2026

Copy link
Copy Markdown

Description

The check CKV_AWS_339 ("Ensure EKS clusters run on a supported Kubernetes version") had an outdated list of supported EKS Kubernetes versions.

Updated to match the current AWS documentation:

Standard support: 1.36, 1.35, 1.34
Extended support: 1.33, 1.32, 1.31

Changes

  • checkov/terraform/checks/resource/aws/EKSPlatformVersion.py: Updated version list from [1.29-1.35] to [1.31-1.36]. Removed end-of-life versions (1.29, 1.30) and added new versions (1.36).
  • tests/terraform/checks/resource/aws/example_EKSPlatformVersion/main.tf: Updated pass2 to use version 1.36 (was 1.35). updated fail1 resource with version 1.29 and fail2 version with 1.30 (was 1.21 and 1.25).

Testing

  • Unit tests pass ✅
  • Real checkov scan validates correct behavior (2 passed, 2 failed) ✅

Updated the supported EKS Kubernetes versions list to match the current
AWS documentation:
- Standard support: 1.36, 1.35, 1.34
- Extended support: 1.33, 1.32, 1.31
- Removed end-of-life versions: 1.30, 1.29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant