From b1f830e762418fe18cf2c69c5b4adc386a7e096b Mon Sep 17 00:00:00 2001 From: sohrab Date: Thu, 27 Aug 2026 16:04:24 +0000 Subject: [PATCH] fix(terraform): update CKV_AWS_339 supported EKS Kubernetes versions Updated the supported EKS Kubernetes versions list to match the current AWS documentation: - Standard support: 1.36, 1.35, 1.34 - Extended support: 1.33, 1.32, 1.31 - Removed end-of-life versions: 1.30, 1.29 --- checkov/terraform/checks/resource/aws/EKSPlatformVersion.py | 2 +- .../checks/resource/aws/example_EKSPlatformVersion/main.tf | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/checkov/terraform/checks/resource/aws/EKSPlatformVersion.py b/checkov/terraform/checks/resource/aws/EKSPlatformVersion.py index b5b7d26f00..336a58464e 100644 --- a/checkov/terraform/checks/resource/aws/EKSPlatformVersion.py +++ b/checkov/terraform/checks/resource/aws/EKSPlatformVersion.py @@ -25,7 +25,7 @@ def get_inspected_key(self) -> str: def get_expected_values(self) -> list[Any]: # https://docs.aws.amazon.com/eks/latest/userguide/kubernetes-versions.html - return ["1.29", "1.30", "1.31", "1.32", "1.33", "1.34", "1.35"] + return ["1.31", "1.32", "1.33", "1.34", "1.35", "1.36"] check = EKSPlatformVersion() diff --git a/tests/terraform/checks/resource/aws/example_EKSPlatformVersion/main.tf b/tests/terraform/checks/resource/aws/example_EKSPlatformVersion/main.tf index 49dfb97c9f..958c89aa19 100644 --- a/tests/terraform/checks/resource/aws/example_EKSPlatformVersion/main.tf +++ b/tests/terraform/checks/resource/aws/example_EKSPlatformVersion/main.tf @@ -22,7 +22,7 @@ resource "aws_eks_cluster" "pass2" { subnet_ids = [aws_subnet.example1.id, aws_subnet.example2.id] } - version = "1.35" + version = "1.36" # Ensure that IAM Role permissions are created before and deleted after EKS Cluster handling. # Otherwise, EKS will not be able to properly delete EKS managed EC2 infrastructure such as Security Groups. depends_on = [ @@ -39,7 +39,7 @@ resource "aws_eks_cluster" "fail" { subnet_ids = [aws_subnet.example1.id, aws_subnet.example2.id] } - version = "1.21" + version = "1.29" # Ensure that IAM Role permissions are created before and deleted after EKS Cluster handling. # Otherwise, EKS will not be able to properly delete EKS managed EC2 infrastructure such as Security Groups. @@ -57,7 +57,7 @@ resource "aws_eks_cluster" "fail2" { subnet_ids = [aws_subnet.example1.id, aws_subnet.example2.id] } - version = "1.25" + version = "1.30" # Ensure that IAM Role permissions are created before and deleted after EKS Cluster handling. # Otherwise, EKS will not be able to properly delete EKS managed EC2 infrastructure such as Security Groups.