Azure Arc-enabled Kubernetes

Definition

Azure Arc-enabled Kubernetes is a service that extends Azure management capabilities to Kubernetes clusters running on any infrastructure, whether on-premises, multi-cloud, or at the edge. It allows for consistent deployment, configuration, and management of Kubernetes clusters using Azure’s tools and services, such as Azure Policy, Azure Monitor, and Azure Security Center. This enables organizations to apply Azure governance and security practices across diverse environments.

Secure Settings Example

apiVersion: policy/v1
kind: Policy
metadata:
  name: enforce-https-traffic
spec:
  policyType: Cluster
  rules:
    - name: require-https
      match:
        resources:
          kinds:
            - Ingress
      validate:
        message: "Ingress must use HTTPS."
        pattern:
          spec:
            tls:
              - secretName: "tls-secret"

Insecure Settings Example

apiVersion: v1
kind: Service
metadata:
  name: insecure-service
spec:
  ports:
    - protocol: TCP
      port: 80
      targetPort: 80
  selector:
    app: my-app
  type: LoadBalancer