-
Notifications
You must be signed in to change notification settings - Fork 494
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
330 changed files
with
13,799 additions
and
617 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,119 @@ | ||
| ### YamlMime:AzureCLIGroup | ||
| uid: az_confcom | ||
| name: az confcom | ||
| extensionInformation: >- | ||
| > [!Note] | ||
| > This reference is part of the **confcom** extension for the Azure CLI (version 2.26.2 or higher). The extension will automatically install the first time you run an **az confcom** command. [Learn more](https://docs.microsoft.com/en-us/cli/azure/azure-cli-extensions-overview) about extensions. | ||
| summary: Commands to generate security policies for confidential containers in Azure. | ||
| description: '' | ||
| directCommands: | ||
| - uid: az_confcom_acipolicygen | ||
| name: az confcom acipolicygen | ||
| summary: Create a Confidential Container Security Policy. | ||
| description: '' | ||
| syntax: >- | ||
| az confcom acipolicygen [--debug-mode] | ||
| [--diff] | ||
| [--disable-stdio] | ||
| [--image] | ||
| [--infrastructure-svn] | ||
| [--input] | ||
| [--json] | ||
| [--outraw] | ||
| [--outraw-pretty-print] | ||
| [--parameters] | ||
| [--print-existing-policy] | ||
| [--print-policy] | ||
| [--save-to-file] | ||
| [--tar] | ||
| [--template-file] | ||
| [--validate-sidecar] | ||
| examples: | ||
| - summary: Input an ARM Template file to inject a base64 encoded Confidential Container Security Policy into the ARM Template | ||
| syntax: az confcom acipolicygen --template-file "./template.json" | ||
| - summary: Input an ARM Template file to create a human-readable Confidential Container Security Policy | ||
| syntax: az confcom acipolicygen --template-file "./template.json" --outraw-pretty-print | ||
| - summary: Input an ARM Template file to save a Confidential Container Security Policy to a file | ||
| syntax: az confcom acipolicygen --template-file "./template.json" -s "./output-file.txt" | ||
| - summary: Input an ARM Template file and use a tar file as the image source instead of the Docker daemon | ||
| syntax: az confcom acipolicygen --template-file "./template.json" --tar "./image.tar" | ||
| optionalParameters: | ||
| - name: --debug-mode | ||
| defaultValue: "False" | ||
| summary: When enabled, the generated security policy adds the ability to use /bin/sh or /bin/bash to debug the container. It also enabled stdio access, ability to dump stack traces, and enables runtime logging. It is recommended to only use this option for debugging purposes. | ||
| description: '' | ||
| - name: --diff -d | ||
| defaultValue: "False" | ||
| summary: When combined with an input ARM Template, verifies the policy present in the ARM Template under "ccePolicy" and the containers within the ARM Template are compatible. If they are incompatible, a list of reasons is given and the exit status code will be 2. | ||
| description: '' | ||
| - name: --disable-stdio | ||
| defaultValue: "False" | ||
| summary: When enabled, the containers in the container group do not have access to stdio. | ||
| description: '' | ||
| - name: --image | ||
| summary: Input image name. | ||
| description: '' | ||
| - name: --infrastructure-svn | ||
| summary: Minimum Allowed Software Version Number for Infrastructure Fragment. | ||
| description: '' | ||
| - name: --input -i | ||
| summary: Input JSON config file. | ||
| description: '' | ||
| - name: --json -j | ||
| defaultValue: "False" | ||
| summary: Outputs in JSON format instead of Rego. | ||
| description: '' | ||
| - name: --outraw | ||
| defaultValue: "False" | ||
| summary: Output policy in clear text compact JSON instead of default base64 format. | ||
| description: '' | ||
| - name: --outraw-pretty-print | ||
| defaultValue: "False" | ||
| summary: Output policy in clear text and pretty print format. | ||
| description: '' | ||
| - name: --parameters -p | ||
| summary: Input parameters file to optionally accompany an ARM Template. | ||
| description: '' | ||
| - name: --print-existing-policy | ||
| defaultValue: "False" | ||
| summary: When enabled, the existing security policy that is present in the ARM Template is printed to the command line, and no new security policy is generated. | ||
| description: '' | ||
| - name: --print-policy | ||
| defaultValue: "False" | ||
| summary: When enabled, the generated security policy is printed to the command line instead of injected into the input ARM Template. | ||
| description: '' | ||
| - name: --save-to-file -s | ||
| summary: Save output policy to given file path. | ||
| description: '' | ||
| - name: --tar | ||
| summary: Path to either a tarball containing image layers or a JSON file containing paths to tarballs of image layers. | ||
| description: '' | ||
| - name: --template-file -a | ||
| summary: Input ARM Template file. | ||
| description: '' | ||
| - name: --validate-sidecar -v | ||
| defaultValue: "False" | ||
| summary: Validate that the image used to generate the CCE Policy for a sidecar container will be allowed by its generated policy. | ||
| description: '' | ||
| commands: | ||
| - az_confcom_acipolicygen | ||
| globalParameters: | ||
| - name: --debug | ||
| summary: Increase logging verbosity to show all debug logs. | ||
| - name: --help -h | ||
| summary: Show this help message and exit. | ||
| - name: --only-show-errors | ||
| summary: Only show errors, suppressing warnings. | ||
| - name: --output -o | ||
| defaultValue: "json" | ||
| parameterValueGroup: "json, jsonc, table, tsv" | ||
| summary: Output format. | ||
| - name: --query | ||
| summary: JMESPath query string. See <a href="http://jmespath.org/">http://jmespath.org/</a> for more information and examples. | ||
| - name: --subscription | ||
| summary: Name or ID of subscription. You can configure the default subscription using `az account set -s NAME_OR_ID`. | ||
| - name: --verbose | ||
| summary: Increase logging verbosity. Use --debug for full debug logs. | ||
| metadata: | ||
| description: Commands to generate security policies for confidential containers in Azure. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.