---
name: containers-best-practices
title: Best practices for IBM Cloud Kubernetes Service
description: Check monthly for available security and operating system patches to update your worker nodes.
last-updated: 2026-03-05
---

> ## Documentation Index
> The table of contents for this documentation set is at https://cloud.ibm.com/docs/containers?format=markdown
> The index for all IBM Cloud docs is at: https://cloud.ibm.com/docs/llms.txt
> Use these files to discover more information as needed.

# Best practices for IBM Cloud Kubernetes Service
{: #best-practices-service}
{: support}

## Keep your cluster environment up to date
{: #bp-1}

Check monthly for available security and operating system patches to [update your worker nodes](https://cloud.ibm.com/docs/containers?topic=containers-update&format=markdown#worker_node).

Make sure to [update your cluster](https://cloud.ibm.com/docs/containers?topic=containers-update&format=markdown) regularly to remain on a supported version Kubernetes Service.

## Keep your command line tools up to date
{: #bp-2}

In the command line, you are notified when updates to the `ibmcloud` CLI and plug-ins are available. Be sure to keep your CLI up-to-date so that you can use all available commands and options.

Make sure that [your `kubectl` CLI](https://cloud.ibm.com/docs/containers?topic=containers-cli-install&format=markdown) client matches the same Kubernetes version as your cluster server. [Kubernetes does not support](https://kubernetes.io/releases/version-skew-policy/){: external} `kubectl` client versions that are 2 or more versions apart from the server version (n +/- 2).

## Regularly rotate your CA certificates
{: #bp-ca}

Regular rotation of certificate authority (CA) certificates is recommended for security purposes. The steps for CA rotation include reloading or replacing worker nodes, so consider rotating CA certificates whenever you update your worker nodes. For more information, see [Rotating CA certificates in your cluster](https://cloud.ibm.com/docs/containers?topic=containers-cert-rotate&format=markdown).

## Document your environment architecture
{: #bp-3}

Maintaining up-to-date documentation and diagrams can help when debugging issues. For more information, see [Documenting your environment architecture](https://cloud.ibm.com/docs/containers?topic=containers-document-environment&format=markdown).

## Subscribe to RSS
{: #bp-4}

You can receive documentation release notes for IBM Cloud Kubernetes Service via RSS. For more information, see [Subscribing to an RSS feed](https://cloud.ibm.com/docs/containers?topic=containers-best-practices-service&format=markdown#bp-4).