Team,
I'm from the Azure Containers team, and regarding the documentation, there seems to be an issue that needs some opinions. Below are the test lab results I performed. Please see the details below. Thanks,
Conclusion
- The policy definition and assignment command went through without any error messages, but nothing showed up on the managed resource group on the portal. However, when I manually added tags, all the tags from the param-values.json file appeared.
- In the 'Remediate tags using Azure Policy' section, I got an error message while trying the az policy remediation create command due to the deny policy on the managed resource group. However, the same rule applies: when I manually added the tags, all the tags from the param-values.json file showed up.
- When I tried to delete all the tags, only the last three tags from the param-values.json file through the Azure Policy remained.
- The command to tag ARO resources using Azure Policy went through with or without the error message regarding the Azure Policy. However, the tags do not show up on the managed resource group in the Azure portal. If I manually add or delete all the tags, the tags from the param-values.json file will show up. Therefore, there are some issues regarding the Azure Policy.
- If I manually add tags on the portal, all the tags from the policy will show up. However, if I delete all the tags, the last tags from the param-values.json file remain after performing the az policy assignment update and az policy remediation create commands.