ManagedClusterSecurityProfileDefenderSecurityGating Class
Definition
Important
Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Microsoft Defender settings for security gating. This validates container image eligibility for deployment based on Defender for Containers security findings. Using Admission Controller, it either audits or prevents deployment of images that do not meet security standards.
public class ManagedClusterSecurityProfileDefenderSecurityGating : System.ClientModel.Primitives.IJsonModel<Azure.ResourceManager.ContainerService.Models.ManagedClusterSecurityProfileDefenderSecurityGating>, System.ClientModel.Primitives.IPersistableModel<Azure.ResourceManager.ContainerService.Models.ManagedClusterSecurityProfileDefenderSecurityGating>type ManagedClusterSecurityProfileDefenderSecurityGating = class
interface IJsonModel<ManagedClusterSecurityProfileDefenderSecurityGating>
interface IPersistableModel<ManagedClusterSecurityProfileDefenderSecurityGating>Public Class ManagedClusterSecurityProfileDefenderSecurityGating
Implements IJsonModel(Of ManagedClusterSecurityProfileDefenderSecurityGating), IPersistableModel(Of ManagedClusterSecurityProfileDefenderSecurityGating)- Inheritance
-
ManagedClusterSecurityProfileDefenderSecurityGating
- Implements
Constructors
| Name | Description |
|---|---|
| ManagedClusterSecurityProfileDefenderSecurityGating() |
Initializes a new instance of ManagedClusterSecurityProfileDefenderSecurityGating. |
Properties
| Name | Description |
|---|---|
| Identities |
List of identities that the admission controller uses to pull security artifacts from registries. These are the same identities used by the cluster to pull container images. For more information on configuring this identity, see https://learn.microsoft.com/en-us/azure/defender-for-cloud/gated-deployment-infrastructure-as-code. |
| IsSecretAccessAllowed |
In use only while registry access is granted by secret rather than managed identity. Sets whether to grant the Defender gating agent access to cluster secrets for pulling images from registries. If secret access is denied and the registry requires pull secrets, the add-on will not perform image validation. Default value is false. |
| IsSecurityGatingEnabled |
Whether to enable Defender security gating. When enabled, the gating feature scans container images and audits or blocks deployment of images that do not meet security standards according to configured security rules. For more information, see https://aka.ms/KubernetesDefenderAuditRule. |
