Maintained with ☕️ by
IcePanel logo
Microsoft Azure logo
Original post

Custom AKS policy support - now public preview

Share

Services

**Embedded Support & New Template Info Property** * _TemplateInfo_ allows users to define the source type for the constraint template. _TemplateInfo_ currently supports two ways to define the constraint template source type: _Base64Encoded_and _PublicUrl_. _Base64Encoded_ format privately embeds the constraint template within an Azure policy definition. * With the use of _templateInfo_, Azure Policy will now auto-generate the constraint property for you. **Learn more** [**in our documentation**](https://docs.microsoft.com/azure/governance/policy/concepts/effects#audit-properties) **and** [**recent blog post**](https://techcommunity.microsoft.com/t5/azure-governance-and-management/azure-policy-for-kubernetes-releases-support-for-custom-policy/ba-p/2699466)**.** **Error State Reporting & Compliance Reason Codes** * Azure dataplane policies targeting Azure Kubernetes clusters now provide compliance reason codes for any template errors or conflicts preventing accurate policy evaluation. * For existing policy assignments and constraint templates already on the cluster, if that Constraint/Template fails, the cluster is protected by maintaining the existing Constraint/Template. The cluster reports as non-compliant until the failure is resolved on the policy assignment or the add-on self-heals. * Existing conflicting policies will function normally but will now report a conflict to users. If the conflicting policies are not already installed on the cluster, they will not be installed until conflicts are resolved. **Learn more and see**[**a full list of reason codes in our documentation**](https://docs.microsoft.com/azure/governance/policy/how-to/determine-non-compliance#aks-resource-provider-mode-compliance-reasons)**.** **Azure Policy VS Code Extension Enhancements** * You can now auto-generate an Azure Policy custom definition from a constraint template. Based on user input, the extension will either embed the constraint template for you in embedded64 format or allow you to input a public URL for a given constraint template. **Learn more** [**in our documentation**](https://docs.microsoft.com/azure/governance/policy/how-to/extension-for-vscode) **and**[**recent blog post**](https://techcommunity.microsoft.com/t5/azure-governance-and-management/azure-policy-for-kubernetes-releases-support-for-custom-policy/ba-p/2699466)**.** For self-help technical inquiries, please visit [Microsoft Q&A](https://docs.microsoft.com/en-us/answers/search.html?c=&includeChildren=&f=&type=question+OR+idea+OR+kbentry+OR+answer+OR+topic+OR+user&redirect=search%2Fsearch&sort=relevance&q=Azure%20policy). If you require technical support and have a support plan, please submit a support ticket in [Microsoft Azure Support](https://ms.portal.azure.com/?quickstart=true&CAF=true#blade/Microsoft%5FAzure%5FSupport/HelpAndSupportBlade/overview) or work with your Microsoft Technical Account Manager. If you would like to purchase a support plan, please explore the [Azure support plans](https://azure.microsoft.com/en-us/support/options/). * Azure Policy * Features * Management * [ Azure Policy](https://azure.microsoft.com/en-gb/services/azure-policy/)