Governing connected Kubernetes clusters with Azure Policy

Azure Policy for connected Kubernetes clusters allows you to extend your governance policies to Kubernetes clusters outside Azure. Azure Policy can help you govern your cluster effectively by having the same state across environments and keep a compliance status against all required configurations.

Azure includes a variety of built-in policy templates for Arc enabled Kubernetes clusters; however, you can author your own policies easily using the Custom Policies functionality. Some of the examples include deploying Microsoft defender agents for your cluster nodes or a validation to ensure that the Kubernetes cluster shouldn't allow privileged containers. Please refer to Microsoft documentation (https://docs.microsoft.com/en-us/azure/azure-arc/kubernetes/policy-reference) to learn more about the built-in policy templates available for connected Kubernetes clusters.

In the last example, we leveraged the Azure CLI...