Azure Policy Admission Control Flow in AKS

Azure Policy for Kubernetes extends the Open Policy Agent (OPA) Gatekeeper to enforce security and compliance rules directly inside your AKS cluster. By installing the Azure Policy add-on, you deploy policy definitions that act as constraint templates and constraints. The add-on continuously evaluates resources like pods and namespaces against these policies. If a resource violates a policy set to deny mode, its creation is blocked; if the policy is in audit mode, the violation is logged. This provides real-time enforcement and centralized compliance reporting without manual checks, ensuring security configurations are uniformly applied.