Policies

Rules a boundary sets for what may run in it — which compute plans, labels, image registries and image tags its workloads may use.

• Create a policy — Choose a rule, fill in what it allows or requires, name the policy, pick its clusters and decide whether it enforces at once.
• API errors — The error codes the Policies API answers with, what causes each and what to do.
• Policies — Rules a boundary sets for what may run in it — which compute plans, labels, image registries and image tags its workloads may use.
• Manage policies — See a boundary's policies, switch one between enforcing and disabled, change it, or delete it.
• Permissions — The two actions that govern policies, the roles that hold them, and where they have to be assigned.
• How policies reach clusters — The objects a policy becomes in each cluster, how to check whether it is in force, and how the platform retries clusters it could not reach.
• Rule reference — What each policy rule checks, which objects and resources it covers, what it refuses and the message a refusal carries.