Skip to content

Commit 12ad2e3

Browse files
v-dirichardsv-dirichards
authored
Merge pull request #204986 from ElazarK/ga-for-arc
ga addition maya
2 parents c984b76 + 06ac1ab commit 12ad2e3

File tree

4 files changed

+81
-10
lines changed

4 files changed

+81
-10
lines changed

‎articles/defender-for-cloud/defender-for-containers-enable.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ title: How to enable Microsoft Defender for Containers in Microsoft Defender for
33
description: Enable the container protections of Microsoft Defender for Containers
44
ms.topic: overview
55
zone_pivot_groups: k8s-host
6-
ms.date: 07/14/2022
6+
ms.date: 07/25/2022
77
---
88

99
# Enable Microsoft Defender for Containers
@@ -30,15 +30,15 @@ You can learn more by watching these videos from the Defender for Cloud in the F
3030
> [!NOTE]
3131
> Defender for Containers' support for Arc-enabled Kubernetes clusters, AWS EKS, and GCP GKE. This is a preview feature.
3232
>
33-
> [!INCLUDE [Legalese](../../includes/defender-for-cloud-preview-legal-text.md)]
33+
> To learn more about the supported operating systems, feature availability, outbound proxy and more see the [Defender for Containers feature availability](supported-machines-endpoint-solutions-clouds-containers.md).
3434
::: zone-end
3535

3636
::: zone pivot="defender-for-container-aks"
3737
[!INCLUDE [Prerequisites](./includes/defender-for-container-prerequisites-aks.md)]
3838
::: zone-end
3939

4040
::: zone pivot="defender-for-container-arc,defender-for-container-eks,defender-for-container-gke"
41-
[!INCLUDE [Prerequisites](./includes/defender-for-container-prerequisites-arc-eks.md)]
41+
[!INCLUDE [Prerequisites](./includes/defender-for-container-prerequisites-arc-eks-gke.md)]
4242
::: zone-end
4343

4444
::: zone pivot="defender-for-container-aks"

‎articles/defender-for-cloud/includes/defender-for-container-prerequisites-aks.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,10 @@
11
---
22
ms.service: defender-for-cloud
33
ms.topic: include
4-
ms.date: 07/14/2022
4+
ms.date: 07/19/2022
55
---
66

7-
## Network requirements
7+
## Network requirements - AKS
88

99
Validate the following endpoints are configured for outbound access so that the Defender profile can connect to Microsoft Defender for Cloud to send security data and events:
1010

‎articles/defender-for-cloud/includes/defender-for-container-prerequisites-arc-eks.md renamed to ‎articles/defender-for-cloud/includes/defender-for-container-prerequisites-arc-eks-gke.md

Lines changed: 10 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
ms.service: defender-for-cloud
33
ms.topic: include
4-
ms.date: 07/14/2022
4+
ms.date: 07/19/2022
55
---
66

77
## Network requirements
@@ -16,4 +16,12 @@ For Azure public cloud deployments:
1616
| *.oms.opinsights.azure.com | 443 |
1717
| login.microsoftonline.com | 443 |
1818

19-
You'll also need to validate the [Azure Arc-enabled Kubernetes network requirements](../../azure-arc/kubernetes/quickstart-connect-cluster.md#meet-network-requirements).
19+
The following domains are only necessary if you're using a relevant OS. For example, if you have EKS clusters running in AWS, then you would only need to apply the `Amazon Linux 2 (Eks): Domain: "amazonlinux.*.amazonaws.com/2/extras/*"` domain.
20+
21+
| Domain | Port | Host operating systems |
22+
| -------------------------- | ---- | -- |
23+
| amazonlinux.*.amazonaws.com/2/extras/ | 443 | Amazon Linux 2 |
24+
| yum default repositories | - | RHEL / Centos |
25+
| apt default repositories | - | Debian |
26+
27+
You'll also need to validate the [Azure Arc-enabled Kubernetes network requirements](../../azure-arc/kubernetes/quickstart-connect-cluster.md#meet-network-requirements).

‎articles/defender-for-cloud/supported-machines-endpoint-solutions-clouds-containers.md

Lines changed: 66 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
title: Microsoft Defender for Containers feature availability
33
description: Learn about the availability of Microsoft Defender for Cloud containers features according to OS, machine type, and cloud deployment.
44
ms.topic: overview
5-
ms.date: 07/26/2022
5+
ms.date: 07/27/2022
66
ms.custom: references_regions
77
---
88

@@ -35,7 +35,7 @@ The **tabs** below show the features that are available, by environment, for Mic
3535

3636
<sup><a name="footnote3"></a>3</sup> VA can detect vulnerabilities for these [language specific packages](#registries-and-images).
3737

38-
## Additional information
38+
## Additional environment information
3939

4040
### Registries and images
4141

@@ -91,6 +91,27 @@ The **tabs** below show the features that are available, by environment, for Mic
9191
> [!NOTE]
9292
> For additional requirements for Kuberenetes workload protection, see [existing limitations](../governance/policy/concepts/policy-for-kubernetes.md#limitations).
9393
94+
### Outbound proxy support
95+
96+
Outbound proxy without authentication and outbound proxy with basic authentication are supported. Outbound proxy that expects trusted certificates is currently not supported.
97+
98+
### Supported host operating systems
99+
100+
Defender for Containers relies on the **Defender extension** for several features. The Defender extension is supported on the following host operating systems:
101+
102+
- Amazon Linux 2
103+
- CentOS 8
104+
- Debian 10
105+
- Debian 11
106+
- Google Container-Optimized OS
107+
- Red Hat Enterprise Linux 8
108+
- Ubuntu 16.04
109+
- Ubuntu 18.04
110+
- Ubuntu 20.04
111+
- Ubuntu 22.04
112+
113+
Ensure your Kubernetes node is running on one of the verified supported operating systems. Clusters with different host operating systems, will only get partial coverage. Check out the [Supported features by environment](#supported-features-by-environment) for more information.
114+
94115
### [**GCP (GKE)**](#tab/gcp-gke)
95116

96117
| Domain | Feature | Supported Resources | Linux release state <sup>[1](#footnote1)</sup> | Windows release state <sup>[1](#footnote1)</sup> | Agentless/Agent-based | Pricing tier |
@@ -124,6 +145,27 @@ The **tabs** below show the features that are available, by environment, for Mic
124145
> [!NOTE]
125146
> For additional requirements for Kuberenetes workload protection, see [existing limitations](../governance/policy/concepts/policy-for-kubernetes.md#limitations).
126147
148+
### Outbound proxy support
149+
150+
Outbound proxy without authentication and outbound proxy with basic authentication are supported. Outbound proxy that expects trusted certificates is currently not supported.
151+
152+
### Supported host operating systems
153+
154+
Defender for Containers relies on the **Defender extension** for several features. The Defender extension is supported on the following host operating systems:
155+
156+
- Amazon Linux 2
157+
- CentOS 8
158+
- Debian 10
159+
- Debian 11
160+
- Google Container-Optimized OS
161+
- Red Hat Enterprise Linux 8
162+
- Ubuntu 16.04
163+
- Ubuntu 18.04
164+
- Ubuntu 20.04
165+
- Ubuntu 22.04
166+
167+
Ensure your Kubernetes node is running on one of the verified supported operating systems. Clusters with different host operating systems, will only get partial coverage. Check out the [Supported features by environment](#supported-features-by-environment) for more information.
168+
127169
### [**On-prem/IaaS (Arc)**](#tab/iaas-arc)
128170

129171
| Domain | Feature | Supported Resources | Linux release state <sup>[1](#footnote1)</sup> | Windows release state <sup>[1](#footnote1)</sup> | Agentless/Agent-based | Pricing tier |
@@ -170,10 +212,31 @@ The **tabs** below show the features that are available, by environment, for Mic
170212
> [!NOTE]
171213
> For additional requirements for Kuberenetes workload protection, see [existing limitations](../governance/policy/concepts/policy-for-kubernetes.md#limitations).
172214
215+
### Outbound proxy support
216+
217+
Outbound proxy without authentication and outbound proxy with basic authentication are supported. Outbound proxy that expects trusted certificates is currently not supported.
218+
219+
### Supported host operating systems
220+
221+
Defender for Containers relies on the **Defender extension** for several features. The Defender extension is supported on the following host operating systems:
222+
223+
- Amazon Linux 2
224+
- CentOS 8
225+
- Debian 10
226+
- Debian 11
227+
- Google Container-Optimized OS
228+
- Red Hat Enterprise Linux 8
229+
- Ubuntu 16.04
230+
- Ubuntu 18.04
231+
- Ubuntu 20.04
232+
- Ubuntu 22.04
233+
234+
Ensure your Kubernetes node is running on one of the verified supported operating systems. Clusters with different host operating systems, will only get partial coverage. Check out the [Supported features by environment](#supported-features-by-environment) for more information.
235+
173236
---
174237

175238
## Next steps
176-
239+
177240
- Learn how [Defender for Cloud collects data using the Log Analytics Agent](enable-data-collection.md).
178241
- Learn how [Defender for Cloud manages and safeguards data](data-security.md).
179242
- Review the [platforms that support Defender for Cloud](security-center-os-coverage.md).

0 commit comments

Comments
 (0)