| Source | Azure Portal | |||||||||||||||
| Display name | [Preview]: Sets readOnlyRootFileSystem in the Pod spec in init containers to true if it is not set. | |||||||||||||||
| Id | 2ae2f266-ecc3-4d26-82c5-8c3cb7774f45 | |||||||||||||||
| Version | 1.3.0-preview Details on versioning |
|||||||||||||||
| Versioning |
Versions supported for Versioning: 4 1.3.0-preview 1.2.0-preview 1.1.0-preview 1.0.0-preview Built-in Versioning [Preview] |
|||||||||||||||
| Category | Kubernetes Microsoft Learn |
|||||||||||||||
| Description | Setting readOnlyRootFileSystem to true increases security by preventing containers from writing into the root filesystem. This works only for linux containers. | |||||||||||||||
| Cloud environments | AzureCloud = true AzureUSGovernment = true AzureChinaCloud = unknown |
|||||||||||||||
| Available in AzUSGov | The Policy is available in AzureUSGovernment cloud. Version: '1.2.0-preview' Repository: Azure-Policy 2ae2f266-ecc3-4d26-82c5-8c3cb7774f45 |
|||||||||||||||
| Mode | Microsoft.Kubernetes.Data | |||||||||||||||
| Type | BuiltIn | |||||||||||||||
| Preview | True | |||||||||||||||
| Deprecated | False | |||||||||||||||
| Effect | Default Mutate Allowed Mutate, Disabled |
|||||||||||||||
| RBAC role(s) | none | |||||||||||||||
| Rule aliases | none | |||||||||||||||
| Rule resource types | IF (1) |
|||||||||||||||
| Compliance | Not a Compliance control | |||||||||||||||
| Initiatives usage |
|
|||||||||||||||
| History |
|
|||||||||||||||
| JSON compare |
compare mode:
version left:
version right:
|
|||||||||||||||
| JSON |
|