Forum Discussion

LA1976's avatar
LA1976
Copper Contributor
Oct 25, 2022

Exclude container from policy

Hi all, hope you can help me with a policy question.

 

For example this policy "Kubernetes cluster should not allow privileged containers"

 

In the definition there is:

 

},
    "excludedContainers": {
      "type""Array",
      "metadata": {
        "displayName""Containers exclusions",
        "description""The list of InitContainers and Containers to exclude from policy evaluation. The identify is the name of container. Use an empty list to apply this policy to all containers in all namespaces."
      },
      "defaultValue": []
    },
    "excludedImages": {
      "type""Array",
      "metadata": {
        "displayName""Image exclusions",
        "description""The list of InitContainers and Containers to exclude from policy evaluation. The identifier is the image of container. Prefix-matching can be signified with `*`. For example: `myregistry.azurecr.io/istio:*`. It is recommended that users use the fully-qualified Docker image name (e.g. start with a domain name) in order to avoid unexpectedly exempting images from an untrusted repository.",
        "portalReview"true
      },
      "defaultValue": []
    }
  }
 
However you cannot set these parameters in the defender for cloud 
 

 

Is there a way to get these parameters activated so that these exclusions can be set?

No RepliesBe the first to reply