This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 49%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EUK%3C/text%3E%3C/svg%3E)
We have disabled the azure policy while creating the aks cluster.
But somehow, it is getting enabled after sometime.
How to check where this is being triggered and disable that setting.
@Uday Kiran Reddy (ureddy) , Thank you for your question.
Can you please View change history in Azure Activity Logs for the AKS cluster? Under the JSON section, you can find the category field whose value should indicate category of the event like "Administrative", "Policy" etc. as illustrated below.
If there is a policy that enforced the event, you shall find details of the policy under properties.policies in the JSON object, as shown below:
You shall also find in the JSON, claims.appid and other information on the entity that triggered the event under claims and caller. Example:
This might lead you to what is triggering the addition of the AKS Addon for Azure Policy.
During cluster creation itself, we got this in the activity log.
And the user it is showing as my user account.
Is this the relevant activity log?
What is the fix we need to apply then?
Most likely, Azure policy is enabled in Auto provisioning section of Microsoft Defender for Cloud.
Microsoft Defender for Cloud -> Environment Settings -> (pick relevant subscription) -> Auto provisioning -> Microsoft Defender for Containers components (preview) -> Azure Policy for Kubernetes add-on.
