checkov icon indicating copy to clipboard operation
checkov copied to clipboard

CKV_AZURE_171 doesn't handle property rename in AzureRM provider 4.x

Open tanadeau opened this issue 6 months ago • 2 comments

Describe the issue CKV_AZURE_171 checks that automatic_channel_upgrade is set. However, this check fails on AzureRM provider 4.x due to the property being renamed to automatic_upgrade_channel. The check should check that both are not set or base check on version.

Examples Should succeed with the following:

resource "azurerm_kubernetes_cluster" "this" {
   # ...
   automatic_upgrade_channel = "stable"
   # ...
}

Version (please complete the following information):

  • Checkov Version 3.2.234

tanadeau avatar Aug 24 '24 17:08 tanadeau