az confcom containers

Note

This reference is part of the confcom extension for the Azure CLI (version 2.26.2 or higher). The extension will automatically install the first time you run an az confcom containers command. Learn more about extensions.

Commands which generate Security Policy Container Definitions.

Commands

Name	Description	Type	Status
az confcom containers from_image	Create a Security Policy Container Definition based on an image reference.	Extension	GA
az confcom containers from_radius	Create a Security Policy Container Definition based on a Radius Bicep template.	Extension	Preview
az confcom containers from_vn2	Create Security Policy Container Definitions based on a VN2 template.	Extension	GA

az confcom containers from_image

Create a Security Policy Container Definition based on an image reference.

az confcom containers from_image [--acquire-policy-token]
                                 [--change-reference]
                                 [--platform]
                                 []

Examples

Input an image reference and generate container definitions

az confcom containers from_image my.azurecr.io/myimage:tag

Optional Parameters

The following parameters are optional, but depending on the context, one or more might become required for the command to execute successfully.

--acquire-policy-token

Acquiring an Azure Policy token automatically for this resource operation.

Property	Value
Parameter group:	Global Policy Arguments

--change-reference

The related change reference ID for this resource operation.

Property	Value
Parameter group:	Global Policy Arguments

--platform

The name of the platform the container definition will run on. Must be either "aci" or "vn2".

Property	Value
Default value:	aci

<IMAGE>

Image to create container definition from.

Property	Value
Parameter group:	Positional

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

Property	Value
Default value:	False

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

Property	Value
Default value:	False

--output -o

Output format.

Property	Value
Default value:	json
Accepted values:	json, jsonc, none, table, tsv, yaml, yamlc

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

Property	Value
Default value:	False

az confcom containers from_radius

Preview

This command is in preview and under development. Reference and support levels: https://aka.ms/CLI_refstatus

Create a Security Policy Container Definition based on a Radius Bicep template.

az confcom containers from_radius [--acquire-policy-token]
                                  [--change-reference]
                                  [--idx]
                                  [--parameters]
                                  [--platform]
                                  []

Examples

Generate a container definition from a Radius Bicep template

az confcom containers from_radius ./app.bicep

Generate a container definition from a Radius Bicep template with parameters

az confcom containers from_radius ./app.bicep --parameters ./params.bicepparam

Generate a container definition for the second container in the template

az confcom containers from_radius ./app.bicep --idx 1

Optional Parameters

The following parameters are optional, but depending on the context, one or more might become required for the command to execute successfully.

--acquire-policy-token

Acquiring an Azure Policy token automatically for this resource operation.

Property	Value
Parameter group:	Global Policy Arguments

--change-reference

The related change reference ID for this resource operation.

Property	Value
Parameter group:	Global Policy Arguments

--idx

Index of the container definition in the template to use (0-based). Defaults to 0.

Property	Value
Default value:	0

--parameters -p

Parameter file(s) for the Radius Bicep template. Can be specified multiple times.

Property	Value
Default value:	[]

--platform

The target platform to create the container definition for (aci or vn2). Defaults to aci.

Property	Value
Default value:	aci

Radius Bicep template to create container definition from.

Property	Value
Parameter group:	Positional

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

Property	Value
Default value:	False

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

Property	Value
Default value:	False

--output -o

Output format.

Property	Value
Default value:	json
Accepted values:	json, jsonc, none, table, tsv, yaml, yamlc

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

Property	Value
Default value:	False

az confcom containers from_vn2

Create Security Policy Container Definitions based on a VN2 template.

az confcom containers from_vn2 [--acquire-policy-token]
                               [--change-reference]
                               [--name]
                               []

Examples

Input a VN2 Template and generate container definitions

az confcom containers from_vn2 vn2.yaml --name mycontainer

Input a VN2 Template and generate container definitions for all containers

az confcom containers from_vn2 vn2.yaml

Optional Parameters

The following parameters are optional, but depending on the context, one or more might become required for the command to execute successfully.

--acquire-policy-token

Acquiring an Azure Policy token automatically for this resource operation.

Property	Value
Parameter group:	Global Policy Arguments

--change-reference

The related change reference ID for this resource operation.

Property	Value
Parameter group:	Global Policy Arguments

--name -n

The name of the container to generate the policy for. If omitted, all containers are returned.

Template to create container definitions from.

Property	Value
Parameter group:	Positional

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

Property	Value
Default value:	False

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

Property	Value
Default value:	False

--output -o

Output format.

Property	Value
Default value:	json
Accepted values:	json, jsonc, none, table, tsv, yaml, yamlc

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

Property	Value
Default value:	False

Feedback

Was this page helpful?