# AUTHORED ONLY — not run from this repo.
# Validate with: kubectl --dry-run=client, kubeval, yamllint.
# Apply to your own AKS cluster per the AKS primer instructions.
---
id: cloud-native-aks-azure-policy
name: "AKS Azure Policy"
description: "Gatekeeper ConstraintTemplate + Constraint enforces label requirements on namespaces; smoke-script verifies compliant and non-compliant namespace creation."
labels:
  customer: any
  profile: aks
  chart-test-swarm/target-k8s-version: aks-1.30
cluster:
  provider: aks
  k8s_version: "1.30"
  preinstall:
    - kind: raw_manifest
      path: chart-test/fixtures/cloud-native/aks/azure-policy-constraint.yaml
product:
  chart: ./chart
  release: sample
  namespace: sample
  set:
    aks.azurePolicy.enabled: "true"
    aks.azurePolicy.policyDefinitionId: "<REPLACE_WITH_POLICY_DEF_ID>"
asserts:
  - type: helm-status-deployed
    release: sample
    namespace: sample
  - type: pods-ready
    namespace: sample
  - type: smoke-script
    path: chart-test/assertions/cloud-native/aks/azure-policy.sh
tags: [cloud-native]
mechanisms: ['cloud:aks', 'addon:azure-policy']
category: cloud-native
tier: authored-only
integration: aks-azure-policy