ManagedClusterSecurityProfileDefenderSecurityGating Class
Definition
Important
Some information relates to prerelease product that may be substantially modified before it’s released. Microsoft makes no warranties, express or implied, with respect to the information provided here.
Microsoft Defender settings for security gating, validates container images eligibility for deployment based on Defender for Containers security findings. Using Admission Controller, it either audits or prevents the deployment of images that do not meet security standards.
public class ManagedClusterSecurityProfileDefenderSecurityGating : System.ClientModel.Primitives.IJsonModel<Azure.ResourceManager.ContainerService.Models.ManagedClusterSecurityProfileDefenderSecurityGating>, System.ClientModel.Primitives.IPersistableModel<Azure.ResourceManager.ContainerService.Models.ManagedClusterSecurityProfileDefenderSecurityGating>type ManagedClusterSecurityProfileDefenderSecurityGating = class
interface IJsonModel<ManagedClusterSecurityProfileDefenderSecurityGating>
interface IPersistableModel<ManagedClusterSecurityProfileDefenderSecurityGating>Public Class ManagedClusterSecurityProfileDefenderSecurityGating
Implements IJsonModel(Of ManagedClusterSecurityProfileDefenderSecurityGating), IPersistableModel(Of ManagedClusterSecurityProfileDefenderSecurityGating)- Inheritance
-
ManagedClusterSecurityProfileDefenderSecurityGating
- Implements
Constructors
| Name | Description |
|---|---|
| ManagedClusterSecurityProfileDefenderSecurityGating() |
Initializes a new instance of ManagedClusterSecurityProfileDefenderSecurityGating. |
Properties
| Name | Description |
|---|---|
| Identities |
List of identities that the admission controller will make use of in order to pull security artifacts from the registry. These are the same identities used by the cluster to pull container images. Each identity provided should have federated identity credential attached to it. |
| IsSecretAccessAllowed |
In use only while registry access granted by secret rather than managed identity. Set whether to grant the Defender gating agent access to the cluster's secrets for pulling images from registries. If secret access is denied and the registry requires pull secrets, the add-on will not perform any image validation. Default value is false. |
| IsSecurityGatingEnabled |
Whether to enable Defender security gating. When enabled, the gating feature will scan container images and audit or block the deployment of images that do not meet security standards according to the configured security rules. |
