Enable pod security policies for AKS cluster
Azure Policy built-in definitions for Azure Kubernetes Service
For new OSDU deployment on Azure, make sure the following security policies are enabled for AKS Built-in policy definitions for Azure Kubernetes Service - Azure Kubernetes Service | Microsoft Docs
-
Enable AKS Policies for osdu-azure namespace -
Enable AKS policies for istio-system namespace -
Enable AKS policies for airflow2 namespace -
Move csi secrets to kube-system as recommended by Microsoft docs Docs -
Fix non compliant policies - Allow Authorized IP Ranges, Enable private clusters. -
Documentation on how to enable the feature and fix compliance issues.
Edited by Krishna Nikhil Vedurumudi