last sync: 2021-Sep-24 16:09:49 UTC

Azure Policy definition

[Deprecated]: Enforce HTTPS ingress in AKS

Name [Deprecated]: Enforce HTTPS ingress in AKS
Azure Portal
Id 2fbff515-eecc-4b7e-9b63-fcc7138b7dc3
Version 1.0.1-deprecated
details on versioning
Category Kubernetes service
Microsoft docs
Description This policy enforces HTTPS ingress in an Azure Kubernetes Service cluster. This policy is deprecated, please visit https://aka.ms/kubepolicydoc for instructions on using new Kubernetes policies.
Mode Microsoft.ContainerService.Data
Type BuiltIn
Preview FALSE
Deprecated True
Effect Default: EnforceRegoPolicy
Allowed: (EnforceRegoPolicy, Disabled)
Used RBAC Role none
History
Date/Time (UTC ymd) (i) Change type Change detail
2020-06-01 18:36:18 change Previous DisplayName: [Limited Preview]: [AKS] Enforce HTTPS ingress in AKS
2019-11-12 19:11:12 change Previous DisplayName: [Limited Preview]: Enforce HTTPS ingress in AKS
Used in Initiatives none
JSON
{
  "displayName": "[Deprecated]: Enforce HTTPS ingress in AKS",
  "policyType": "BuiltIn",
  "mode": "Microsoft.ContainerService.Data",
  "description": "This policy enforces HTTPS ingress in an Azure Kubernetes Service cluster. This policy is deprecated, please visit https://aka.ms/kubepolicydoc for instructions on using new Kubernetes policies.",
  "metadata": {
    "version": "1.0.1-deprecated",
    "category": "Kubernetes service",
    "deprecated": true
  },
  "parameters": {
    "effect": {
      "type": "String",
      "metadata": {
        "displayName": "Effect",
        "description": "Enable or disable the execution of the policy"
      },
      "allowedValues": [
        "EnforceRegoPolicy",
        "Disabled"
      ],
      "defaultValue": "EnforceRegoPolicy"
    }
  },
  "policyRule": {
    "if": {
      "field": "type",
      "equals": "Microsoft.ContainerService/managedClusters"
    },
    "then": {
      "effect": "[parameters('effect')]",
      "details": {
        "policyId": "HttpsIngressOnly",
        "policy": "https://raw.githubusercontent.com/Azure/azure-policy/master/built-in-references/KubernetesService/ingress-https-only/limited-preview/gatekeeperpolicy.rego"
      }
    }
  }
}