AzPolicyAdvertizer

last sync: 2024-Nov-25 18:54:24 UTC

Configure Kubernetes clusters with specified Flux v2 Bucket source using local secrets

Azure BuiltIn Policy definition

Source

Azure Portal

Display name

Configure Kubernetes clusters with specified Flux v2 Bucket source using local secrets

b8c1d6c1-6137-97c6-9c34-d4627e54ca26

Version

1.0.0
Details on versioning

Versioning

Versions supported for Versioning: 1
1.0.0
Built-in Versioning [Preview]

Category

Kubernetes
Microsoft Learn

Description

Deploy a 'fluxConfiguration' to Kubernetes clusters to assure that the clusters get their source of truth for workloads and configurations from the defined Bucket. This definition requires local authentication secrets stored in the Kubernetes cluster. For instructions, visit https://aka.ms/GitOpsFlux2Policy.

Mode

Indexed

Type

BuiltIn

Preview

False

Deprecated

False

Effect

Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled

RBAC role(s)

Role Name	Role Id
Contributor	b24988ac-6180-42a0-ab88-20f7382dd24c

Rule aliases

THEN-ExistenceCondition (8)

Alias	Namespace	ResourceType	Path	PathIsDefault	Modifiable
Microsoft.KubernetesConfiguration/fluxConfigurations/bucket.bucketName	Microsoft.KubernetesConfiguration	fluxConfigurations	properties.bucket.bucketName	True	False
Microsoft.KubernetesConfiguration/fluxConfigurations/bucket.insecure	Microsoft.KubernetesConfiguration	fluxConfigurations	properties.bucket.insecure	True	False
Microsoft.KubernetesConfiguration/fluxConfigurations/bucket.localAuthRef	Microsoft.KubernetesConfiguration	fluxConfigurations	properties.bucket.localAuthRef	True	False
Microsoft.KubernetesConfiguration/fluxConfigurations/bucket.syncIntervalInSeconds	Microsoft.KubernetesConfiguration	fluxConfigurations	properties.bucket.syncIntervalInSeconds	True	False
Microsoft.KubernetesConfiguration/fluxConfigurations/bucket.timeoutInSeconds	Microsoft.KubernetesConfiguration	fluxConfigurations	properties.bucket.timeoutInSeconds	True	False
Microsoft.KubernetesConfiguration/fluxConfigurations/bucket.url	Microsoft.KubernetesConfiguration	fluxConfigurations	properties.bucket.url	True	False
Microsoft.KubernetesConfiguration/fluxConfigurations/namespace	Microsoft.KubernetesConfiguration	fluxConfigurations	properties.namespace	True	False
Microsoft.KubernetesConfiguration/fluxConfigurations/scope	Microsoft.KubernetesConfiguration	fluxConfigurations	properties.scope	True	False

Rule resource types

IF (2)
Microsoft.ContainerService/managedClusters
Microsoft.Kubernetes/connectedClusters
THEN-Deployment (1)
Microsoft.KubernetesConfiguration/fluxConfigurations

Compliance

Not a Compliance control

Initiatives usage

none

History

Date/Time (UTC ymd) (i)	Change type	Change detail
2022-08-19 16:33:23	add	b8c1d6c1-6137-97c6-9c34-d4627e54ca26

JSON compare

n/a

JSON

api-version=2021-06-01
EPAC