| Source | Azure Portal | |||||||||||||||
| Display name | [Preview]: Sets readOnlyRootFileSystem in the Pod spec to true if it is not set. | |||||||||||||||
| Id | 8e875f96-2c56-40ca-86db-b9f6a0be7347 | |||||||||||||||
| Version | 1.3.0-preview Details on versioning |
|||||||||||||||
| Versioning |
Versions supported for Versioning: 4 1.3.0-preview 1.2.0-preview 1.1.0-preview 1.0.0-preview Built-in Versioning [Preview] |
|||||||||||||||
| Category | Kubernetes Microsoft Learn |
|||||||||||||||
| Description | Setting readOnlyRootFileSystem to true increases security by preventing containers from writing into the root filesystem | |||||||||||||||
| Cloud environments | AzureCloud = true AzureUSGovernment = true AzureChinaCloud = unknown |
|||||||||||||||
| Available in AzUSGov | The Policy is available in AzureUSGovernment cloud. Version: '1.2.0-preview' Repository: Azure-Policy 8e875f96-2c56-40ca-86db-b9f6a0be7347 |
|||||||||||||||
| Mode | Microsoft.Kubernetes.Data | |||||||||||||||
| Type | BuiltIn | |||||||||||||||
| Preview | True | |||||||||||||||
| Deprecated | False | |||||||||||||||
| Effect | Default Mutate Allowed Mutate, Disabled |
|||||||||||||||
| RBAC role(s) | none | |||||||||||||||
| Rule aliases | none | |||||||||||||||
| Rule resource types | IF (1) |
|||||||||||||||
| Compliance | Not a Compliance control | |||||||||||||||
| Initiatives usage |
|
|||||||||||||||
| History |
|
|||||||||||||||
| JSON compare |
compare mode:
version left:
version right:
|
|||||||||||||||
| JSON |
|