Skip to content

[Fixes] Ensure that VirtualMachineImages are removed before MSIs are … #512

[Fixes] Ensure that VirtualMachineImages are removed before MSIs are …

[Fixes] Ensure that VirtualMachineImages are removed before MSIs are … #512

Triggered via push January 2, 2024 01:52
Status Success
Total duration 41m 34s
Artifacts
Initialize pipeline
14s
Initialize pipeline
Module  /  Static validation
1m 25s
Module / Static validation
Matrix: Module / PSRule validation
Matrix: Module / Deployment validation
Fit to window
Zoom out
Zoom in

Annotations

40 errors and 11 warnings
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
AZR-000408: 864e505983a1f-test-csmkube failed Azure.Deployment.SecureParameter. Use secure parameters for any parameter that contains sensitive information.
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
AZR-000015: ***csmkube001 failed Azure.AKS.Version. AKS control plane and nodes pools should use a current stable release.
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
AZR-000016: ***csmkube001 failed Azure.AKS.PoolVersion. AKS node pools should match Kubernetes control plane version.
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
AZR-000018: ***csmkube001 failed Azure.AKS.NodeMinPods. Azure Kubernetes Cluster (AKS) nodes should use a minimum number of pods.
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
AZR-000022: ***csmkube001 failed Azure.AKS.AuditLogs. AKS clusters should collect security-based audit logs to assess and monitor the compliance status of workloads.
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
AZR-000023: ***csmkube001 failed Azure.AKS.PlatformLogs. AKS clusters should collect platform diagnostic logs to monitor the state of workloads.
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
AZR-000285: ***csmkube001 failed Azure.AKS.UptimeSLA. AKS clusters should have Uptime SLA enabled for a financially backed SLA.
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
AZR-000024: ***csmkube001 failed Azure.AKS.MinNodeCount. AKS clusters should have minimum number of nodes for failover and updates.
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
AZR-000027: ***csmkube001 failed Azure.AKS.NetworkPolicy. Deploy AKS clusters with Network Policies enabled.
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
AZR-000030: ***csmkube001 failed Azure.AKS.AuthorizedIPs. Restrict access to API server endpoints to authorized IP addresses.
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
AZR-000408: 864e505983a1f-test-csmmin failed Azure.Deployment.SecureParameter. Use secure parameters for any parameter that contains sensitive information.
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
AZR-000015: ***csmmin001 failed Azure.AKS.Version. AKS control plane and nodes pools should use a current stable release.
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
AZR-000017: ***csmmin001 failed Azure.AKS.PoolScaleSet. Deploy AKS clusters with nodes pools based on VM scale sets.
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
AZR-000018: ***csmmin001 failed Azure.AKS.NodeMinPods. Azure Kubernetes Cluster (AKS) nodes should use a minimum number of pods.
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
AZR-000022: ***csmmin001 failed Azure.AKS.AuditLogs. AKS clusters should collect security-based audit logs to assess and monitor the compliance status of workloads.
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
AZR-000023: ***csmmin001 failed Azure.AKS.PlatformLogs. AKS clusters should collect platform diagnostic logs to monitor the state of workloads.
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
AZR-000285: ***csmmin001 failed Azure.AKS.UptimeSLA. AKS clusters should have Uptime SLA enabled for a financially backed SLA.
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
AZR-000024: ***csmmin001 failed Azure.AKS.MinNodeCount. AKS clusters should have minimum number of nodes for failover and updates.
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
AZR-000027: ***csmmin001 failed Azure.AKS.NetworkPolicy. Deploy AKS clusters with Network Policies enabled.
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
AZR-000030: ***csmmin001 failed Azure.AKS.AuthorizedIPs. Restrict access to API server endpoints to authorized IP addresses.
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
AZR-000408: 864e505983a1f-test-csmaz failed Azure.Deployment.SecureParameter. Use secure parameters for any parameter that contains sensitive information.
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
AZR-000016: ***csmaz001 failed Azure.AKS.PoolVersion. AKS node pools should match Kubernetes control plane version.
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
AZR-000018: ***csmaz001 failed Azure.AKS.NodeMinPods. Azure Kubernetes Cluster (AKS) nodes should use a minimum number of pods.
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
AZR-000022: ***csmaz001 failed Azure.AKS.AuditLogs. AKS clusters should collect security-based audit logs to assess and monitor the compliance status of workloads.
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
AZR-000023: ***csmaz001 failed Azure.AKS.PlatformLogs. AKS clusters should collect platform diagnostic logs to monitor the state of workloads.
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
AZR-000285: ***csmaz001 failed Azure.AKS.UptimeSLA. AKS clusters should have Uptime SLA enabled for a financially backed SLA.
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
AZR-000024: ***csmaz001 failed Azure.AKS.MinNodeCount. AKS clusters should have minimum number of nodes for failover and updates.
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
AZR-000027: ***csmaz001 failed Azure.AKS.NetworkPolicy. Deploy AKS clusters with Network Policies enabled.
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
AZR-000030: ***csmaz001 failed Azure.AKS.AuthorizedIPs. Restrict access to API server endpoints to authorized IP addresses.
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
AZR-000031: ***csmaz001 failed Azure.AKS.LocalAccounts. Enforce named user accounts with RBAC assigned permissions.
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
AZR-000408: 864e505983a1f-test-csmpriv failed Azure.Deployment.SecureParameter. Use secure parameters for any parameter that contains sensitive information.
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
AZR-000015: ***csmpriv001 failed Azure.AKS.Version. AKS control plane and nodes pools should use a current stable release.
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
AZR-000016: ***csmpriv001 failed Azure.AKS.PoolVersion. AKS node pools should match Kubernetes control plane version.
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
AZR-000018: ***csmpriv001 failed Azure.AKS.NodeMinPods. Azure Kubernetes Cluster (AKS) nodes should use a minimum number of pods.
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
AZR-000022: ***csmpriv001 failed Azure.AKS.AuditLogs. AKS clusters should collect security-based audit logs to assess and monitor the compliance status of workloads.
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
AZR-000023: ***csmpriv001 failed Azure.AKS.PlatformLogs. AKS clusters should collect platform diagnostic logs to monitor the state of workloads.
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
AZR-000024: ***csmpriv001 failed Azure.AKS.MinNodeCount. AKS clusters should have minimum number of nodes for failover and updates.
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
AZR-000027: ***csmpriv001 failed Azure.AKS.NetworkPolicy. Deploy AKS clusters with Network Policies enabled.
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
AZR-000030: ***csmpriv001 failed Azure.AKS.AuthorizedIPs. Restrict access to API server endpoints to authorized IP addresses.
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
AZR-000031: ***csmpriv001 failed Azure.AKS.LocalAccounts. Enforce named user accounts with RBAC assigned permissions.
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
The option 'Execution.SuppressedRuleWarning' is deprecated and will be removed with PSRule v3. See http://aka.ms/ps-rule/deprecations for more detail.
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
The option 'Execution.NotProcessedWarning' is deprecated and will be removed with PSRule v3. See http://aka.ms/ps-rule/deprecations for more detail.
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
AZR-000287: ***csmkube001 failed Azure.AKS.EphemeralOSDisk. AKS clusters should use ephemeral OS disks which can provide lower read/write latency, along with faster node scaling and cluster upgrades.
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
The option 'Execution.SuppressedRuleWarning' is deprecated and will be removed with PSRule v3. See http://aka.ms/ps-rule/deprecations for more detail.
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
The option 'Execution.NotProcessedWarning' is deprecated and will be removed with PSRule v3. See http://aka.ms/ps-rule/deprecations for more detail.
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
The option 'Execution.SuppressedRuleWarning' is deprecated and will be removed with PSRule v3. See http://aka.ms/ps-rule/deprecations for more detail.
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
The option 'Execution.NotProcessedWarning' is deprecated and will be removed with PSRule v3. See http://aka.ms/ps-rule/deprecations for more detail.
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
AZR-000287: ***csmaz001 failed Azure.AKS.EphemeralOSDisk. AKS clusters should use ephemeral OS disks which can provide lower read/write latency, along with faster node scaling and cluster upgrades.
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
The option 'Execution.SuppressedRuleWarning' is deprecated and will be removed with PSRule v3. See http://aka.ms/ps-rule/deprecations for more detail.
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
The option 'Execution.NotProcessedWarning' is deprecated and will be removed with PSRule v3. See http://aka.ms/ps-rule/deprecations for more detail.
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
AZR-000287: ***csmpriv001 failed Azure.AKS.EphemeralOSDisk. AKS clusters should use ephemeral OS disks which can provide lower read/write latency, along with faster node scaling and cluster upgrades.