We're on 1.23.7 and looking to upgrade to 1.25.2. We've got the CIS 1.6 flag turned on and having read the changes in the CIS benchmarks for 1.24+ I'm wondering if anyone has done a similar upgrade via the automated upgrade controller. Is that recomended/supported for hardened clusters?

It’s not something that I would recommend automating at this point. You need to manually switch from --profile=cis1.6 to --profile=cis-1.23 and make sure that you’re not relying on PSPs for anything, as they are gone-gone and replaced with PSS in Kubernetes 1.25

Thank you!