Do AWS EKS managed nodes receive security patching automatically or is it the owner's responsibility to patch?


This is likely to depend on exactly how your worker nodes are provisioned in the cluster.

If you're using unmanaged node groups then the AWS documentation here recommends that the customer upgrade their nodes manually.

If you're using managed node groups , AWS manage the node lifecyle as detailed here which I would take to mean that they will be patched and upgraded by AWS.

Of course if you're using workloads in EKS based on Fargate, the underlying hosts are managed fully by AWS, meaning you don't have to worry about patching them.

  • Thank you for the quick and prompt response! – vkoukou Jan 17 '20 at 14:30

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.