rage.fail

azure-aks-cluster-in-resource-group

explicit azure emits Contains

match (record)

{ "field": "resourceGroup", "resource_type": "Microsoft.ContainerService/managedClusters" }

emit

source type	`ResourceGroup`
target type	`KubernetesCluster`
source	`<ResourceGroup>`
target	`<managedCluster>`

Narrative

Resource group {rg.name} contains AKS cluster {cluster.name}.

Raw rule rules/explicit/azure-aks.yaml

id: azure-aks-cluster-in-resource-group
emits: Contains
applies_to:
- azure
match_record:
  resource_type: Microsoft.ContainerService/managedClusters
  field: resourceGroup
emit:
  source_type: ResourceGroup
  target_type: KubernetesCluster
  source: <ResourceGroup>
  target: <managedCluster>
  api_source: az aks list --resource-group <rg>
  evidence_field: resourceGroup
  narrative: Resource group {rg.name} contains AKS cluster {cluster.name}.