| Source | Azure Portal | ||||||||||
| Display name | [Preview]: Sets readOnlyRootFileSystem in the Pod spec to true if it is not set. | ||||||||||
| Id | 8e875f96-2c56-40ca-86db-b9f6a0be7347 | ||||||||||
| Version | 1.1.0-preview Details on versioning |
||||||||||
| Category | Kubernetes Microsoft Learn |
||||||||||
| Description | Setting readOnlyRootFileSystem to true increases security by preventing containers from writing into the root filesystem | ||||||||||
| Mode | Microsoft.Kubernetes.Data | ||||||||||
| Type | BuiltIn | ||||||||||
| Preview | True | ||||||||||
| Deprecated | False | ||||||||||
| Effect | Default Mutate Allowed Mutate, Disabled |
||||||||||
| RBAC role(s) | none | ||||||||||
| Rule aliases | none | ||||||||||
| Rule resource types | IF (1) Microsoft.ContainerService/managedClusters |
||||||||||
| Compliance | Not a Compliance control | ||||||||||
| Initiatives usage |
|
||||||||||
| History |
|
||||||||||
| JSON compare |
compare mode:
version left:
version right:
|
||||||||||
| JSON |
|