Issue with Policy "IP Forwarding on your virtual machine should be disabled"
- Dominant language
- Open Policy Agent
- Stars
- 1.7k
- Forks
- 1.2k
- Avg merge
- 2d 54m
- Merged PRs (30d)
- 3
Description
While I am creating the ARO cluster I get an error like this from time2time.
"errorMessage": "Unable to evaluate policy with definition '/providers/Microsoft.Authorization/policyDefinitions/bd352bd5-2853-4985-bf0d-73806b4a5744/' and assignment '/subscriptions//providers/Microsoft.Authorization/policyAssignments/SecurityCenterBuiltIn/'. The request to retrieve resources of type 'Microsoft.Security/assessments' failed with HTTP status code 'InternalServerError'.", "eventCategory": "Policy",
It looks like the policy „bd352bd5-2853-4985-bf0d-73806b4a5744” which is azure-policy/ASC_IPForwardingOnVirtualMachines_Audit.json is not able to evaluate its state and it leads to cluster failure.
I have Disabled this policy in the Assigment but it looks like an error!
Contributor guide
No contributing guide indexed for this repository
Research direction
Start with azure-policy/ASC_IPForwardingOnVirtualMachines_Audit.json and the reported Microsoft.Security/assessments HTTP 500 during ARO cluster creation. Determine whether the policy definition or assignment causes the failure, then verify the behavior with the policy enabled and disabled and confirm that cluster creation is no longer blocked.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- azure
- Domain
- cloud, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100