We're trying to figure out a way to periodically have system security patches for our K8s cluster, to keep our system safe and meet the security requirements.
our K8s clusters are running in different clouds, AWS, Azure, Bare metal, etc.
for clouds, we can change our IAM image to update to the latest, replace the old image, launch new nodes, and drain the old nodes. For bare metal one, we need to drain the old nodes, and then patch, and add them back.
Not sure if there is any other way to do that automatically. we don't want to do this work each month in each clouds. maybe there is a better solution?