admin policy management.html
Manage Policies
Policies are filters that determine the access that users and groups have to various assets and artifacts of their organization.
| - Policies must have unique names. |
| - When a user has multiple policies due to membership in multiple groups, these policy filters apply as an intersection (in other words, it uses the AND logical operator). |
To manage policies, follow these steps:
Select the Admin tab, and then the Policy Management option in the drop-down menu.
The Policy Management interface appears.
It has the following components:
Search bar to locate specific policies
The Add New Policy button.
List of policies, including the Policy Name, Type, and Scope.
Proceed to make changes, as described in:
Change a Policy
To change an existing policy, follow these steps:
Hover your pointer over the Scope field of the policy you plan to change.
When the Edit (pencil) icon appears, click on it.
The Edit Policy interface appears.
You can change the Name of the policy, its Type, and its Key (the Operator / Value) tuple.
You can build the key using logical operators, or regex expressions.
You can also delete the existing key, and add another key as a filter.
Here, we are changing the namespace_only policy by swapping the operator = (equal) to =~ (regex similar to).
Click Save Policy.
Kloudfuse confirms that you successfully changed the policy.
Note the changes in the policy as it appears on the Policy Management interface.
Add a New Policy
To add a new policy, follow these steps:
Click the Add New Policy button.
The Add Policy interface appears.
In the interface, specify these fields:
Name
Choose a meaningful and descriptive name for your new policy
Type
The options are Custom (default), All, or None.
You can build custom policies using the Key/Operator/Value specification.
Here, we specify a custom policy test1 with Key
kube_namespace, Operator = (equals), and Valueoctel.[Optional] You can use multiple filters to define your custom policies.
Click the Add Filter button and proceed.
- After you finish defining your new policy, click Save Policy.
Kloudfuse confirms that you successfully created a new policy.
Note that the new policy appears on the Policy Management interface.
Delete a Policy
To delete an existing policy from your RBAC configuration, follow these steps:
Hover your pointer over the Scope field of the policy you plan to delete from the system.
When the Delete (trashcan) icon appears, click it.
Kloudfuse prompts you to confirm deleting the policy.
You can click Delete to confirm, or Cancel to stop deleting the policy.
You should see a notification that Kloudfuse deleted the policy successfully.
The Group Management interface no longer lists the policy test1.