ps-rule.yaml (35 lines of code) (raw):
#
# PSRule configuration
#
# Please see the documentation for all configuration options:
# https://microsoft.github.io/PSRule/
# https://azure.github.io/PSRule.Rules.Azure/setup/configuring-options/
# https://github.com/microsoft/PSRule.Rules.CAF
input:
pathIgnore:
- ".vscode/"
- "*.md"
- "*.Designer.cs"
- "*.resx"
- "*.sln"
- "*.txt"
- "*.html"
- "*.ico"
include:
path: []
module:
- "PSRule.Rules.Azure"
- "PSRule.Rules.CAF"
requires:
PSRule.Rules.CAF: ">=0.3.0"
output:
culture:
- en-US
configuration:
# Enable automatic expansion of Azure parameter files
AZURE_PARAMETER_FILE_EXPANSION: true
# Bicep is experimental and currently disabled as testing occurs against compiled template
# Enable automatic expansion of bicep source files
AZURE_BICEP_FILE_EXPANSION: true
#ProjectSpecifc rules
Azure_AKSNodeMinimumMaxPods: 30
rule:
exclude:
# Ignore the following rules for all resources
- Azure.Resource.UseTags
- Azure.VM.Standalone
- Azure.KeyVault.SoftDelete
- Azure.KeyVault.PurgeProtect
- Azure.AppGw.UseHTTPS #In this project AGIC is in charge of managing the AppGW.
- Azure.ACR.ContentTrust
- Azure.Storage.UseReplication
- Azure.Storage.SoftDelete
- Azure.Cosmos.DisableMetadataWrite