# Ensure Node Pool Autoscaling Has Sensible Limits

- Source: https://support.icompaas.com/support/solutions/articles/a_1791826031144300-ensure-node-pool-autoscaling-has-sensible-limits
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [OVH Cloud](https://support.icompaas.com/support/solutions/c_1791819364512367) › [checks](https://support.icompaas.com/support/solutions/folders/f_1791819376721251)
- Last updated: 2026-10-12
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

**Description**

Ensure node pools that use autoscaling have a minimum node count that keeps the service available and a maximum node count that matches the expected load and budget, so the cluster cannot grow without limit.

**Rationale**

Without sensible limits, a traffic spike, a bug, or a denial-of-service attack can make the cluster add many nodes, causing large unexpected costs. A minimum that is too low can also cause outages. Setting both limits keeps the cluster available and the cost under control.

**Impact**

-   Prevents unexpected cost growth
    
-   Keeps enough nodes for availability
    
-   Limits may need tuning as load changes
    

**Default Value**

Autoscaling is off by default for node pools. When it is enabled, you set the minimum and maximum nodes.

**Pre-Requisites**

-   Permission to manage the Kubernetes cluster
    
-   Expected load and budget for the cluster
    

**Test Plan**

1.  Log in to the OVHcloud Control Panel at [https://www.ovh.com/manager/](https://www.ovh.com/manager/).
    
2.  In the left-hand menu, select Public Cloud and choose your project.
    
3.  In the left-hand menu, select Managed Kubernetes Service, then click the cluster name to open it.
    
4.  Open the Node pools tab and review each node pool's autoscaling setting and its minimum and maximum nodes (or run kubectl get nodepools and check the MIN and MAX columns).
    
5.  If autoscaling is enabled with no sensible maximum, or the minimum is too low for availability, follow the implementation steps.
    

**Implementation Steps**

1.  Log in to the OVHcloud Control Panel at [https://www.ovh.com/manager/](https://www.ovh.com/manager/).
    
2.  In the left-hand menu, select Public Cloud and choose your project.
    
3.  In the left-hand menu, select Managed Kubernetes Service, then click the cluster name to open it.
    
4.  Open the Node pools tab, click the ⋯ button in the node pool's row, and select Configure node pool size.
    
5.  Enable autoscaling, set the minimum and maximum pool size, and confirm.
    

**Backout Plan**

1.  Log in to the OVHcloud Control Panel at [https://www.ovh.com/manager/](https://www.ovh.com/manager/).
    
2.  In the left-hand menu, select Public Cloud and choose your project.
    
3.  In the left-hand menu, select Managed Kubernetes Service, then click the cluster name to open it.
    
4.  Open the Node pools tab, select Configure node pool size from the ⋯ menu, and restore the previous values.
    

**Reference**

-   [https://help.ovhcloud.com/csm/en-public-cloud-kubernetes-managing-nodes?id=kb\_article\_view&sysparm\_article=KB0049898](https://help.ovhcloud.com/csm/en-public-cloud-kubernetes-managing-nodes?id=kb_article_view&sysparm_article=KB0049898)
    
-   [https://docs.ovhcloud.com/en/guides/public-cloud/containers-orchestration/managed-kubernetes/configure-cluster-autoscaler](https://docs.ovhcloud.com/en/guides/public-cloud/containers-orchestration/managed-kubernetes/configure-cluster-autoscaler)

## Related compliance guidance

- [SOC 2 compliance: a practical implementation guide for cloud-native SaaS teams](https://support.icompaas.com/compliance/soc-2-trust-services-criteria): Configuration checks like this one are the technical half of a SOC 2 / ISO 27001 programme — the guide shows where they fit, what else an auditor expects, and how to evidence them.
- [ISO/IEC 27001:2022 compliance: a practical implementation guide](https://support.icompaas.com/compliance/iso-27001-2022): ISO 27001 Annex A.8 (technological controls) is where cloud hardening evidence lands; the guide shows how to run the ISMS around it.