Skip to content

Migrate container-service/managed-cluster to AVM specs (#4454) #514

Migrate container-service/managed-cluster to AVM specs (#4454)

Migrate container-service/managed-cluster to AVM specs (#4454) #514

Triggered via push January 15, 2024 11:49
Status Success
Total duration 44m 24s
Artifacts
Initialize pipeline
21s
Initialize pipeline
Module  /  Static validation
1m 36s
Module / Static validation
Matrix: Module / PSRule validation
Matrix: Module / Deployment validation
Fit to window
Zoom out
Zoom in

Annotations

40 errors and 40 warnings
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
AZR-000408: 864e505983a1f-test-csmkube failed Azure.Deployment.SecureParameter. Use secure parameters for any parameter that contains sensitive information.
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
AZR-000015: ***csmkube001 failed Azure.AKS.Version. AKS control plane and nodes pools should use a current stable release.
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
AZR-000016: ***csmkube001 failed Azure.AKS.PoolVersion. AKS node pools should match Kubernetes control plane version.
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
AZR-000018: ***csmkube001 failed Azure.AKS.NodeMinPods. Azure Kubernetes Cluster (AKS) nodes should use a minimum number of pods.
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
AZR-000022: ***csmkube001 failed Azure.AKS.AuditLogs. AKS clusters should collect security-based audit logs to assess and monitor the compliance status of workloads.
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
AZR-000023: ***csmkube001 failed Azure.AKS.PlatformLogs. AKS clusters should collect platform diagnostic logs to monitor the state of workloads.
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
AZR-000285: ***csmkube001 failed Azure.AKS.UptimeSLA. AKS clusters should have Uptime SLA enabled for a financially backed SLA.
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
AZR-000024: ***csmkube001 failed Azure.AKS.MinNodeCount. AKS clusters should have minimum number of nodes for failover and updates.
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
AZR-000027: ***csmkube001 failed Azure.AKS.NetworkPolicy. Deploy AKS clusters with Network Policies enabled.
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
AZR-000030: ***csmkube001 failed Azure.AKS.AuthorizedIPs. Restrict access to API server endpoints to authorized IP addresses.
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
AZR-000408: 864e505983a1f-test-csmpriv failed Azure.Deployment.SecureParameter. Use secure parameters for any parameter that contains sensitive information.
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
AZR-000015: ***csmpriv001 failed Azure.AKS.Version. AKS control plane and nodes pools should use a current stable release.
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
AZR-000016: ***csmpriv001 failed Azure.AKS.PoolVersion. AKS node pools should match Kubernetes control plane version.
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
AZR-000018: ***csmpriv001 failed Azure.AKS.NodeMinPods. Azure Kubernetes Cluster (AKS) nodes should use a minimum number of pods.
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
AZR-000022: ***csmpriv001 failed Azure.AKS.AuditLogs. AKS clusters should collect security-based audit logs to assess and monitor the compliance status of workloads.
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
AZR-000023: ***csmpriv001 failed Azure.AKS.PlatformLogs. AKS clusters should collect platform diagnostic logs to monitor the state of workloads.
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
AZR-000024: ***csmpriv001 failed Azure.AKS.MinNodeCount. AKS clusters should have minimum number of nodes for failover and updates.
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
AZR-000027: ***csmpriv001 failed Azure.AKS.NetworkPolicy. Deploy AKS clusters with Network Policies enabled.
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
AZR-000030: ***csmpriv001 failed Azure.AKS.AuthorizedIPs. Restrict access to API server endpoints to authorized IP addresses.
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
AZR-000031: ***csmpriv001 failed Azure.AKS.LocalAccounts. Enforce named user accounts with RBAC assigned permissions.
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
AZR-000408: 864e505983a1f-test-csmaz failed Azure.Deployment.SecureParameter. Use secure parameters for any parameter that contains sensitive information.
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
AZR-000016: ***csmaz001 failed Azure.AKS.PoolVersion. AKS node pools should match Kubernetes control plane version.
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
AZR-000018: ***csmaz001 failed Azure.AKS.NodeMinPods. Azure Kubernetes Cluster (AKS) nodes should use a minimum number of pods.
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
AZR-000022: ***csmaz001 failed Azure.AKS.AuditLogs. AKS clusters should collect security-based audit logs to assess and monitor the compliance status of workloads.
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
AZR-000023: ***csmaz001 failed Azure.AKS.PlatformLogs. AKS clusters should collect platform diagnostic logs to monitor the state of workloads.
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
AZR-000285: ***csmaz001 failed Azure.AKS.UptimeSLA. AKS clusters should have Uptime SLA enabled for a financially backed SLA.
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
AZR-000024: ***csmaz001 failed Azure.AKS.MinNodeCount. AKS clusters should have minimum number of nodes for failover and updates.
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
AZR-000027: ***csmaz001 failed Azure.AKS.NetworkPolicy. Deploy AKS clusters with Network Policies enabled.
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
AZR-000030: ***csmaz001 failed Azure.AKS.AuthorizedIPs. Restrict access to API server endpoints to authorized IP addresses.
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
AZR-000031: ***csmaz001 failed Azure.AKS.LocalAccounts. Enforce named user accounts with RBAC assigned permissions.
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
AZR-000408: 864e505983a1f-test-csmmin failed Azure.Deployment.SecureParameter. Use secure parameters for any parameter that contains sensitive information.
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
AZR-000015: ***csmmin001 failed Azure.AKS.Version. AKS control plane and nodes pools should use a current stable release.
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
AZR-000017: ***csmmin001 failed Azure.AKS.PoolScaleSet. Deploy AKS clusters with nodes pools based on VM scale sets.
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
AZR-000018: ***csmmin001 failed Azure.AKS.NodeMinPods. Azure Kubernetes Cluster (AKS) nodes should use a minimum number of pods.
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
AZR-000022: ***csmmin001 failed Azure.AKS.AuditLogs. AKS clusters should collect security-based audit logs to assess and monitor the compliance status of workloads.
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
AZR-000023: ***csmmin001 failed Azure.AKS.PlatformLogs. AKS clusters should collect platform diagnostic logs to monitor the state of workloads.
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
AZR-000285: ***csmmin001 failed Azure.AKS.UptimeSLA. AKS clusters should have Uptime SLA enabled for a financially backed SLA.
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
AZR-000024: ***csmmin001 failed Azure.AKS.MinNodeCount. AKS clusters should have minimum number of nodes for failover and updates.
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
AZR-000027: ***csmmin001 failed Azure.AKS.NetworkPolicy. Deploy AKS clusters with Network Policies enabled.
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
AZR-000030: ***csmmin001 failed Azure.AKS.AuthorizedIPs. Restrict access to API server endpoints to authorized IP addresses.
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
Target object 'modules/container-service/managed-cluster/tests/e2e/kubenet/main.test.bicep' has not been processed because no matching rules were found.
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.UseReplication' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmkube-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.SoftDelete' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmkube-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.BlobAccessType' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmkube-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.Name' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmkube-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.FileShareSoftDelete' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmkube-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.ContainerSoftDelete' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmkube-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.DefenderCloud' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmkube-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.ADX.Usage' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmkube-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/kubenet/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.VM.UseManagedDisks' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmkube-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
Target object 'modules/container-service/managed-cluster/tests/e2e/priv/main.test.bicep' has not been processed because no matching rules were found.
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.UseReplication' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmpriv-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.SoftDelete' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmpriv-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.BlobAccessType' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmpriv-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.Name' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmpriv-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.FileShareSoftDelete' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmpriv-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.ContainerSoftDelete' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmpriv-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.DefenderCloud' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmpriv-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.ADX.Usage' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmpriv-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/priv/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.VM.UseManagedDisks' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmpriv-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
Target object 'modules/container-service/managed-cluster/tests/e2e/azure/main.test.bicep' has not been processed because no matching rules were found.
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.UseReplication' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmaz-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.SoftDelete' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmaz-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.BlobAccessType' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmaz-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.Name' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmaz-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.FileShareSoftDelete' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmaz-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.ContainerSoftDelete' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmaz-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.DefenderCloud' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmaz-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.ADX.Usage' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmaz-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/azure/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.VM.UseManagedDisks' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmaz-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
Target object 'modules/container-service/managed-cluster/tests/e2e/defaults/main.test.bicep' has not been processed because no matching rules were found.
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.UseReplication' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmmin-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.SoftDelete' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmmin-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.BlobAccessType' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmmin-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.Name' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmmin-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.FileShareSoftDelete' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmmin-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.ContainerSoftDelete' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmmin-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.Storage.DefenderCloud' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmmin-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.ADX.Usage' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmmin-rg'. Suppress Rules for dependencies
Module / PSRule validation (tests/e2e/defaults/main.test.bicep)
Rule 'PSRule.Rules.Azure\Azure.VM.UseManagedDisks' was suppressed by suppression group '.\SuppressDependency' for 'dep-***-containerservice.managedclusters-csmmin-rg'. Suppress Rules for dependencies