| Source | Azure Portal | |||||||||
| Display name | Kubernetes cluster Windows containers should not run as ContainerAdministrator | |||||||||
| Id | 5485eac0-7e8f-4964-998b-a44f4f0c1e75 | |||||||||
| Version | 1.1.0 Details on versioning |
|||||||||
| Category | Kubernetes Microsoft Learn |
|||||||||
| Description | Prevent usage of ContainerAdministrator as the user to execute the container processes for Windows pods or containers. This recommendation is intended to improve the security of Windows nodes. For more information, see https://kubernetes.io/docs/concepts/windows/intro/ . | |||||||||
| Mode | Microsoft.Kubernetes.Data | |||||||||
| Type | BuiltIn | |||||||||
| Preview | False | |||||||||
| Deprecated | False | |||||||||
| Effect | Default Audit Allowed Audit, Deny, Disabled |
|||||||||
| RBAC role(s) | none | |||||||||
| Rule aliases | none | |||||||||
| Rule resource types | IF (2) Microsoft.ContainerService/managedClusters Microsoft.Kubernetes/connectedClusters |
|||||||||
| Compliance | Not a Compliance control | |||||||||
| Initiatives usage | none | |||||||||
| History |
|
|||||||||
| JSON compare |
compare mode:
version left:
version right:
|
|||||||||
| JSON |
|