Skip to content

InfraCI - ByoVnet cluster #2586

InfraCI - ByoVnet cluster

InfraCI - ByoVnet cluster #2586

Triggered via schedule November 8, 2023 23:03
Status Failure
Total duration 20m 36s
Artifacts
This run and associated checks have been archived and are scheduled for deletion. Learn more about checks retention

ByoVnetCI.yml

on: schedule
DeployVerify
0s
DeployVerify
Post-Deploy  /  K8S
Post-Deploy / K8S
SmokeTest_SimpleApp  /  App_Create
SmokeTest_SimpleApp / App_Create
CostEstimate  /  Estimate
CostEstimate / Estimate
SmokeTest_JavaApp-certmgr  /  App_Create
SmokeTest_JavaApp-certmgr / App_Create
SmokeTest_JavaApp-appgw  /  App_Create
SmokeTest_JavaApp-appgw / App_Create
Troubleshoot  /  Log
2s
Troubleshoot / Log
Troubleshoot  /  VerifyMonitoring
0s
Troubleshoot / VerifyMonitoring
Troubleshoot  /  CaptureAgicLogs
0s
Troubleshoot / CaptureAgicLogs
Troubleshoot  /  CaptureAKSLogs
0s
Troubleshoot / CaptureAKSLogs
Infra_Destroy  /  Cleanup
Infra_Destroy / Cleanup
Fit to window
Zoom out
Zoom in

Annotations

12 errors and 11 warnings
Well_Architected
AZR-000402: crbyo290105ef2d8fb failed Azure.ACR.Firewall. Limit network access of container registries to only trusted clients.
Well_Architected
AZR-000119: kv-byo290105ef2d8fb failed Azure.KeyVault.Logs. Ensure audit diagnostics logs are enabled to audit Key Vault access.
Well_Architected
AZR-000355: kv-byo290105ef2d8fb failed Azure.KeyVault.Firewall. Key Vault should only accept explicitly allowed traffic.
Well_Architected
AZR-000016: aks-byo failed Azure.AKS.PoolVersion. AKS node pools should match Kubernetes control plane version.
Well_Architected
AZR-000285: aks-byo failed Azure.AKS.UptimeSLA. AKS clusters should have Uptime SLA enabled for a financially backed SLA.
Well_Architected
AZR-000031: aks-byo failed Azure.AKS.LocalAccounts. Enforce named user accounts with RBAC assigned permissions.
Well_Architected
AZR-000370: aks-byo failed Azure.AKS.DefenderProfile. Enable the Defender profile with Azure Kubernetes Service (AKS) cluster.
Well_Architected
AZR-000408: helper-KeyVaultAppsRbac failed Azure.Deployment.SecureParameter. Use secure parameters for any parameter that contains sensitive information.
Well_Architected
One or more assertions failed. One or more rules reported failure.
Well_Architected
Process completed with exit code 1.
Deploy
Error: az cli script failed.
Deploy
az cli script failed.
Validation
Skip output 'PARAMOVERRIDES' since it may contain secret.
Well_Architected
Target object '150af15a-f536-d9bd-f15f-4d7f8526ac76' has not been processed because no matching rules were found.
Well_Architected
Rule 'PSRule.Rules.Azure\Azure.AppGw.UseWAF' was suppressed for 'agw-byo'.
Well_Architected
Rule 'PSRule.Rules.Azure\Azure.AppGw.Prevention' was suppressed for 'agw-byo'.
Well_Architected
Rule 'PSRule.Rules.Azure\Azure.AppGw.WAFEnabled' was suppressed for 'agw-byo'.
Well_Architected
Rule 'PSRule.Rules.Azure\Azure.AKS.AuthorizedIPs' was suppressed for 'aks-byo'.
Well_Architected
Rule 'PSRule.Rules.Azure\Azure.AKS.AutoUpgrade' was suppressed for 'aks-byo'.
Well_Architected
Target object '62cdcbb1-53f6-90b5-8ef2-698055da8b6d' has not been processed because no matching rules were found.
Well_Architected
Target object 'c5774c46-b1ba-b3ee-03d4-8a7de24bbfe7' has not been processed because no matching rules were found.
Well_Architected
Target object '97a7c225-6fce-6f18-3269-a17e363c21be' has not been processed because no matching rules were found.
Well_Architected
Target object 'Node CPU utilization high for aks-byo CI-1' has not been processed because no matching rules were found.