From e00b86d62d6e814ced0dc69fb75614d329a17cee Mon Sep 17 00:00:00 2001 From: fseldow Date: Thu, 15 Jun 2023 13:10:38 +0800 Subject: [PATCH 1/4] Image Integrity swagger in 20203-060-20-preview --- .../2023-06-02-preview/managedClusters.json | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/preview/2023-06-02-preview/managedClusters.json b/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/preview/2023-06-02-preview/managedClusters.json index e95f2c6d0d28..4e55c67bd8af 100644 --- a/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/preview/2023-06-02-preview/managedClusters.json +++ b/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/preview/2023-06-02-preview/managedClusters.json @@ -6733,6 +6733,10 @@ "$ref": "#/definitions/ManagedClusterSecurityProfileImageCleaner", "description": "Image Cleaner settings for the security profile." }, + "imageIntegrity": { + "$ref": "#/definitions/ManagedClusterSecurityProfileImageIntegrity", + "description": "Image Integrity is a feature that works with Azure Policy to verify image integrity by signature. This will not have any effect unless policy is applied to enforce image signatures. See https://aka.ms/aks/image-integrity for how to use this feature via policy" + }, "nodeRestriction": { "$ref": "#/definitions/ManagedClusterSecurityProfileNodeRestriction", "description": "[Node Restriction](https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/#noderestriction) settings for the security profile." @@ -6894,6 +6898,16 @@ }, "description": "Image Cleaner removes unused images from nodes, freeing up disk space and helping to reduce attack surface area. Here are settings for the security profile." }, + "ManagedClusterSecurityProfileImageIntegrity": { + "type": "object", + "properties": { + "enabled": { + "type": "boolean", + "description": "Whether to enable image integrity. The default value is false" + } + }, + "description": "Image integrity related settings for the security profile." + }, "ManagedClusterSecurityProfileNodeRestriction": { "type": "object", "properties": { From 6cca5727b5a2382af71ac520f1a9005b1a962873 Mon Sep 17 00:00:00 2001 From: fseldow Date: Thu, 15 Jun 2023 13:32:11 +0800 Subject: [PATCH 2/4] f --- .../aks/preview/2023-06-02-preview/managedClusters.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/preview/2023-06-02-preview/managedClusters.json b/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/preview/2023-06-02-preview/managedClusters.json index 4e55c67bd8af..118b7fd348f3 100644 --- a/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/preview/2023-06-02-preview/managedClusters.json +++ b/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/preview/2023-06-02-preview/managedClusters.json @@ -6735,7 +6735,7 @@ }, "imageIntegrity": { "$ref": "#/definitions/ManagedClusterSecurityProfileImageIntegrity", - "description": "Image Integrity is a feature that works with Azure Policy to verify image integrity by signature. This will not have any effect unless policy is applied to enforce image signatures. See https://aka.ms/aks/image-integrity for how to use this feature via policy" + "description": "Image Integrity is a feature that works with Azure Policy to verify image integrity by signature. This will not have any effect unless policy is applied to enforce image signatures. See https://aka.ms/aks/image-integrity for how to use this feature via policy." }, "nodeRestriction": { "$ref": "#/definitions/ManagedClusterSecurityProfileNodeRestriction", @@ -6903,7 +6903,7 @@ "properties": { "enabled": { "type": "boolean", - "description": "Whether to enable image integrity. The default value is false" + "description": "Whether to enable image integrity. The default value is false." } }, "description": "Image integrity related settings for the security profile." From c921d7e47bde2e1d06c8cbd02f4974341c493916 Mon Sep 17 00:00:00 2001 From: fseldow Date: Thu, 15 Jun 2023 18:22:18 +0800 Subject: [PATCH 3/4] f --- .../aks/preview/2023-06-02-preview/managedClusters.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/preview/2023-06-02-preview/managedClusters.json b/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/preview/2023-06-02-preview/managedClusters.json index 118b7fd348f3..c6bd52cf8fa6 100644 --- a/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/preview/2023-06-02-preview/managedClusters.json +++ b/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/preview/2023-06-02-preview/managedClusters.json @@ -6735,7 +6735,7 @@ }, "imageIntegrity": { "$ref": "#/definitions/ManagedClusterSecurityProfileImageIntegrity", - "description": "Image Integrity is a feature that works with Azure Policy to verify image integrity by signature. This will not have any effect unless policy is applied to enforce image signatures. See https://aka.ms/aks/image-integrity for how to use this feature via policy." + "description": "Image integrity is a feature that works with Azure Policy to verify image integrity by signature. This will not have any effect unless policy is applied to enforce image signatures. See https://aka.ms/aks/image-integrity for how to use this feature via policy." }, "nodeRestriction": { "$ref": "#/definitions/ManagedClusterSecurityProfileNodeRestriction", From 2c7541bc88e1e745ce7e409ba762ba4e091c3a2e Mon Sep 17 00:00:00 2001 From: fseldow Date: Fri, 16 Jun 2023 14:12:31 +0800 Subject: [PATCH 4/4] ff --- .../aks/preview/2023-06-02-preview/managedClusters.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/preview/2023-06-02-preview/managedClusters.json b/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/preview/2023-06-02-preview/managedClusters.json index c6bd52cf8fa6..d93cb948c7eb 100644 --- a/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/preview/2023-06-02-preview/managedClusters.json +++ b/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/preview/2023-06-02-preview/managedClusters.json @@ -6735,7 +6735,7 @@ }, "imageIntegrity": { "$ref": "#/definitions/ManagedClusterSecurityProfileImageIntegrity", - "description": "Image integrity is a feature that works with Azure Policy to verify image integrity by signature. This will not have any effect unless policy is applied to enforce image signatures. See https://aka.ms/aks/image-integrity for how to use this feature via policy." + "description": "Image integrity is a feature that works with Azure Policy to verify image integrity by signature. This will not have any effect unless Azure Policy is applied to enforce image signatures. See https://aka.ms/aks/image-integrity for how to use this feature via policy." }, "nodeRestriction": { "$ref": "#/definitions/ManagedClusterSecurityProfileNodeRestriction",