Ensure that Active Azure Service Fabric clusters are automatically upgraded to latest version

MEDIUM

Description

Active Azure Service Fabric clusters are not automatically upgreaded to latest version. This could result in cluster services to missout on important bug fixes.

Remediation

In Azure Console -

  1. Open the Azure Portal and go to Service Fabric clusters.
  2. Select the cluster you wish to edit.
  3. Under Settings, select Fabric upgrades.
  4. Either set the Fabric upgrade mode to Automatic or select the appropriate Fabric version from the drop-down.
  5. Select Save.

In Terraform -

  1. In the azurerm_service_fabric_cluster resource, either set the upgrade_mode field to Automatic or set the cluster_code_version field to the appropriate version.

References:
https://learn.microsoft.com/en-us/azure/service-fabric/service-fabric-cluster-upgrade
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/resources/service_fabric_cluster

Policy Details

Rule Reference ID: AC_AZURE_0208
CSP: Azure
Remediation Available: Yes
Resource Category: Compute
Resource Type: Service Fabric Cluster

Frameworks