InfraCI - ByoVnet cluster #2697
ByoVnetCI.yml
on: schedule
Validation
2m 21s
CostEstimate
/
Estimate
Troubleshoot
/
Log
4s
Troubleshoot
/
VerifyMonitoring
0s
Troubleshoot
/
CaptureAgicLogs
0s
Troubleshoot
/
CaptureAKSLogs
0s
Infra_Destroy
/
Cleanup
Annotations
12 errors and 11 warnings
Well_Architected
AZR-000402: crbyo290105ef2d8fb failed Azure.ACR.Firewall. Container Registry without restrictions can be accessed from any network location including the Internet.
|
Well_Architected
AZR-000016: aks-byo failed Azure.AKS.PoolVersion. AKS node pools should match Kubernetes control plane version.
|
Well_Architected
AZR-000412: aks-byo failed Azure.AKS.MinUserPoolNodes. User node pools in an AKS cluster should have a minimum number of nodes for failover and updates.
|
Well_Architected
AZR-000285: aks-byo failed Azure.AKS.UptimeSLA. AKS clusters should have Uptime SLA enabled for a financially backed SLA.
|
Well_Architected
AZR-000446: aks-byo failed Azure.AKS.MaintenanceWindow. Configure customer-controlled maintenance windows for AKS clusters.
|
Well_Architected
AZR-000435: aks-byo failed Azure.AKS.NodeAutoUpgrade. Deploy AKS Clusters with Node Auto-Upgrade enabled
|
Well_Architected
AZR-000031: aks-byo failed Azure.AKS.LocalAccounts. Enforce named user accounts with RBAC assigned permissions.
|
Well_Architected
AZR-000370: aks-byo failed Azure.AKS.DefenderProfile. Enable the Defender profile with Azure Kubernetes Service (AKS) cluster.
|
Well_Architected
AZR-000119: kv-byo290105ef2d8fb failed Azure.KeyVault.Logs. Ensure audit diagnostics logs are enabled to audit Key Vault access.
|
Well_Architected
AZR-000355: kv-byo290105ef2d8fb failed Azure.KeyVault.Firewall. Key Vault should only accept explicitly allowed traffic.
|
Deploy
Error: az cli script failed.
|
Deploy
az cli script failed.
|
Validation
Skip output 'PARAMOVERRIDES' since it may contain secret.
|
Well_Architected
The configuration option 'Azure_AKSNodeMinimumMaxPods' has been replaced with 'AZURE_AKS_POOL_MINIMUM_MAXPODS'. The option 'Azure_AKSNodeMinimumMaxPods' is deprecated and will no longer work in the next major version. Please update your configuration to the new name. See https://aka.ms/ps-rule-azure/upgrade.
|
Well_Architected
Rule 'PSRule.Rules.Azure\Azure.AppGw.UseWAF' was suppressed for 'agw-byo'.
|
Well_Architected
Rule 'PSRule.Rules.Azure\Azure.AppGw.Prevention' was suppressed for 'agw-byo'.
|
Well_Architected
Rule 'PSRule.Rules.Azure\Azure.AppGw.WAFEnabled' was suppressed for 'agw-byo'.
|
Well_Architected
Rule 'PSRule.Rules.Azure\Azure.AKS.AuthorizedIPs' was suppressed for 'aks-byo'.
|
Well_Architected
Rule 'PSRule.Rules.Azure\Azure.AKS.AutoUpgrade' was suppressed for 'aks-byo'.
|
Well_Architected
Target object '62cdcbb1-53f6-90b5-8ef2-698055da8b6d' has not been processed because no matching rules were found.
|
Well_Architected
Target object '150af15a-f536-d9bd-f15f-4d7f8526ac76' has not been processed because no matching rules were found.
|
Well_Architected
Target object 'c5774c46-b1ba-b3ee-03d4-8a7de24bbfe7' has not been processed because no matching rules were found.
|
Well_Architected
Target object '97a7c225-6fce-6f18-3269-a17e363c21be' has not been processed because no matching rules were found.
|