| Source | Azure Portal | ||||||||||
| Display name | [Preview]: Sets readOnlyRootFileSystem in the Pod spec in init containers to true if it is not set. | ||||||||||
| Id | 2ae2f266-ecc3-4d26-82c5-8c3cb7774f45 | ||||||||||
| Version | 1.1.0-preview Details on versioning |
||||||||||
| Category | Kubernetes Microsoft Learn |
||||||||||
| Description | Setting readOnlyRootFileSystem to true increases security by preventing containers from writing into the root filesystem. This works only for linux containers. | ||||||||||
| Mode | Microsoft.Kubernetes.Data | ||||||||||
| Type | BuiltIn | ||||||||||
| Preview | True | ||||||||||
| Deprecated | False | ||||||||||
| Effect | Default Mutate Allowed Mutate, Disabled |
||||||||||
| RBAC role(s) | none | ||||||||||
| Rule aliases | none | ||||||||||
| Rule resource types | IF (1) Microsoft.ContainerService/managedClusters |
||||||||||
| Compliance | Not a Compliance control | ||||||||||
| Initiatives usage |
|
||||||||||
| History |
|
||||||||||
| JSON compare |
compare mode:
version left:
version right:
|
||||||||||
| JSON |
|