| Source | Azure Portal | ||||||||||||
| Display name | [Preview]: Sets readOnlyRootFileSystem in the Pod spec in init containers to true if it is not set. | ||||||||||||
| Id | 2ae2f266-ecc3-4d26-82c5-8c3cb7774f45 | ||||||||||||
| Version | 1.2.0-preview Details on versioning |
||||||||||||
| Versioning |
Versions supported for Versioning: 3 1.0.0-preview 1.1.0-preview 1.2.0-preview Built-in Versioning [Preview] |
||||||||||||
| Category | Kubernetes Microsoft Learn |
||||||||||||
| Description | Setting readOnlyRootFileSystem to true increases security by preventing containers from writing into the root filesystem. This works only for linux containers. | ||||||||||||
| Mode | Microsoft.Kubernetes.Data | ||||||||||||
| Type | BuiltIn | ||||||||||||
| Preview | True | ||||||||||||
| Deprecated | False | ||||||||||||
| Effect | Default Mutate Allowed Mutate, Disabled |
||||||||||||
| RBAC role(s) | none | ||||||||||||
| Rule aliases | none | ||||||||||||
| Rule resource types | IF (1) Microsoft.ContainerService/managedClusters |
||||||||||||
| Compliance | Not a Compliance control | ||||||||||||
| Initiatives usage |
|
||||||||||||
| History |
|
||||||||||||
| JSON compare |
compare mode:
version left:
version right:
|
||||||||||||
| JSON |
|