gordonby/aks-well-architected-assesment-brownfield

Uses PSRule for Azure with GitHub actions to create a Well Architected Assessment in a brownfield scenario

AKS Well Architected

Using AKS Construction and PSRule to create a Well Architected configuration for your AKS environment.

Repo purpose

To serve as a demonstratable Well Architected review of a live environment.

Using GitHub actions to orchestrate the environment deploy and assessment. Failures are reported in the GitHub step summary, GitHub artifacts and by raising an issue in the repository.

The sample workflow runs on demand, and on a schedule. By running on a schedule we can be alerted to both;

1. Degredations in our environment configuration
2. New rules in the Well Architected assesment

AKS Configurations

Description	AKSC	Rules passed	Rules failed	PSRule Config	Rules exempt
The "cool" config, Cillium, Azure CNI Overlay and Prometheus monitoring through Azure monitor	AKSC	20	19

aks-well-architected-assesment-brownfield's Issues

Tracking failed WA items

Azure.ACR.Usage 0 1 Fail
Azure.ACR.ContainerScan 0 1 Fail
Azure.ACR.GeoReplica 0 1 Fail
Azure.AKS.NodeMinPods 0 1 Fail
Azure.AKS.AutoScaling 0 1 Fail
Azure.AKS.AuditLogs 0 1 Fail
Azure.AKS.PlatformLogs 0 1 Fail
Azure.AKS.UptimeSLA 0 1 Fail
Azure.AKS.EphemeralOSDisk 0 1 Fail
Azure.Resource.UseTags 1 2 Fail
Azure.AKS.NetworkPolicy 0 1 Fail
Azure.AKS.AzurePolicyAddOn 0 1 Fail
Azure.AKS.ManagedAAD 0 1 Fail
Azure.AKS.AuthorizedIPs 0 1 Fail
Azure.AKS.AzureRBAC 0 1 Fail
Azure.AKS.SecretStore 0 1 Fail
Azure.AKS.AutoUpgrade 0 1 Fail
Azure.AKS.ContainerInsights 0 1 Fail
Azure.AKS.DefenderProfile 0 1 Fail