-
Notifications
You must be signed in to change notification settings - Fork 1.1k
/
LogAnalyticsExtension_Linux_VMSS_Deny.json
76 lines (76 loc) · 2.47 KB
/
LogAnalyticsExtension_Linux_VMSS_Deny.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
{
"properties": {
"displayName": "The legacy Log Analytics extension should not be installed on Linux virtual machine scale sets",
"policyType": "BuiltIn",
"mode": "All",
"description": "Automatically prevent installation of the legacy Log Analytics Agent as the final step of migrating from legacy agents to Azure Monitor Agent. After you have uninstalled existing legacy extensions, this policy will deny all future installations of the legacy agent extension on Linux virtual machine scale sets. Learn more: https://aka.ms/migratetoAMA",
"metadata": {
"version": "1.0.0",
"category": "Monitoring"
},
"version": "1.0.0",
"parameters": {
"effect": {
"type": "String",
"metadata": {
"displayName": "Effect",
"description": "Enable or disable the execution of the policy"
},
"allowedValues": [
"Deny",
"Audit",
"Disabled"
],
"defaultValue": "Audit"
}
},
"policyRule": {
"if": {
"anyOf": [
{
"allOf": [
{
"field": "type",
"equals": "Microsoft.Compute/virtualMachineScaleSets/extensions"
},
{
"field": "Microsoft.Compute/virtualMachineScaleSets/extensions/publisher",
"equals": "Microsoft.EnterpriseCloud.Monitoring"
},
{
"field": "Microsoft.Compute/virtualMachineScaleSets/extensions/type",
"equals": "OmsAgentForLinux"
}
]
},
{
"allOf": [
{
"field": "type",
"equals": "Microsoft.Compute/virtualMachineScaleSets"
},
{
"count": {
"field": "Microsoft.Compute/VirtualMachineScaleSets/extensionProfile.extensions[*]",
"where": {
"field": "Microsoft.Compute/VirtualMachineScaleSets/extensionProfile.extensions[*].type",
"equals": "OmsAgentForLinux"
}
},
"greater": 0
}
]
}
]
},
"then": {
"effect": "[parameters('effect')]"
}
},
"versions": [
"1.0.0"
]
},
"id": "/providers/Microsoft.Authorization/policyDefinitions/383c45fa-8b64-4d1c-aa9f-e69d2d879aa4",
"name": "383c45fa-8b64-4d1c-aa9f-e69d2d879aa4"
}