How deeply does Azure Security cover Azure Policy add-on for Kubernetes?

Identifies auditing and enforcement roles but does not provide configuration commands or detailed policy implementation steps.

Azure Policy add-on for Kubernetes

As explained in Azure Security

The Azure Policy add-on for Kubernetes is a Kubernetes integration that evaluates workloads against Azure Policy rules and can audit or enforce them.

The Azure Policy add-on for Kubernetes extends Azure Policy into Kubernetes security hardening. It evaluates workloads against policy rules and supports auditing or enforcing compliance, adding governance alongside runtime threat detection and image vulnerability assessment. section 7.2.2

Use the add-on as one layer of container security:

Audit workloads to identify policy violations before applying enforcement. section 7.2.2
Enforce approved workload configurations through Azure Policy rules. section 7.2.2
Combine policy controls with protection for the container registry, Kubernetes control plane, and worker nodes. section 7.2.2

How Azure Security covers it

liveBook manning.com

Read Azure Security on liveBook Get the book at manning.com

Related concepts

Microsoft Defender for Containersused by · Microsoft Defender for Containers is Microsoft's cloud security service for detecting threats, assessing vulnerabilities, and enforcing security policies across containerized workloads and Kubernetes environments.
security hardeningimplements · Security hardening is the practice of reducing a system’s vulnerabilities and attack surface through secure configuration, protective controls, and removal of unnecessary functionality.

This explainer was generated by Manning's knowledge graph from the text of Azure Security. The section links point to the parts of the book it draws on.