Skip to main content

Policy

Properties

PropertyTypeRequiredDescriptionDefaultExample
typestringNopolicy type Type of policy that determines where and how it is enforced-"kubernetes_cluster"
enginestringNopolicy engine The policy engine used to evaluate the policy. Must be compatible with the policy type.-"kyverno"
contentsstringNopolicy document Policy content in the appropriate format for the policy type. Supports Nuon templating and external file sources: HTTP(S) URLs (https://example.com/policy.json), git repositories (g…--
componentsarrayNotarget components List of component names this policy applies to. Use [”*”] to apply to all components of the specified type. If empty, doesn’t apply to any component. Ignored when type is ‘sandbox’.-"*"

Property Details

type

Allowed values:
  • "kubernetes_cluster"
  • "terraform_module"
  • "helm_chart"
  • "kubernetes_manifest"
  • "sandbox"

engine

Allowed values:
  • "kyverno"
  • "opa"

components

Examples:
"*"
"rds_cluster"