Azure / Community-Policy

This repo is for Microsoft Azure customers and Microsoft teams to collaborate in making custom policies.

MIT License

636 stars 327 forks source link

New Policy (Azure Kubernetes Services): Ensure the AKS cluster is not using the 'Free' tier SKU #437

Closed tdefise closed 7 months ago

tdefise commented 7 months ago

Policy

Name: Ensure the AKS cluster is not using the 'Free' tier SKU
Description: In the 'Free' tier, the Uptime SLA feature is not available. The Uptime SLA feature guarantees 99.95% availability of the Kubernetes API server endpoint for clusters using Availability Zones, and 99.9% of availability for clusters that aren't using Availability Zones.- Supported effect(s): Deny, Audit, Disabled
Parameters: None

Description

Ensure ephemeral disks are used for OS disks on Agent Pools

Details

In the Standard tier, the Uptime SLA feature is enabled by default per cluster. The Uptime SLA feature guarantees 99.95% availability of the Kubernetes API server endpoint for clusters using Availability Zones, and 99.9% of availability for clusters that aren't using Availability Zones.For more information, see SLA Source: https://learn.microsoft.com/en-us/samples/azure-samples/aks-ephemeral-os-disk/aks-ephemeral-os-disk

Source: https://learn.microsoft.com/en-us/azure/aks/free-standard-pricing-tiers#uptime-sla-terms-and-conditions

Contribution Rules

[X] Contain a single Policy in a folder by itself with 3 files: azurepolicy.json, azurepolicy.rules.json, and azurepolicy.parameters.json
[X] Used Confirm-PolicyDefinitionIsValid.ps1
[X] Used Out-FormattedPolicyDefinition.ps1
[X] Effect default value alignes with convention