isabella232 / acm-policy-controller-library

Anthos Config Management Policy Controller enforces your clusters' compliance with policies

Anthos Config Management – Policy Controller Library

Contents

• Background
• Enabling Policy Controller
• Policies
• Usage
• Disclaimer

Background

Policy Controller, part of Anthos Config Management, is a Kubernetes dynamic admission controller that checks, audits, and enforces your clusters' compliance with policies related to security, regulations, or arbitrary business rules.

Policy Controller policies are broken up into two separate objects: Constraints and ConstraintTemplates. Having two distinct objects allows for separation of the policy definition (ConstraintTemplate) and policy enforcement (Constraint).

This repository contains ConstraintTemplate and example Constraint objects for use with Anthos GKE and Anthos Service Mesh.

Enabling Policy Controller

See Installing Policy Controller

Policies

• Anthos Service Mesh

Bundles

• CIS Kubernetes 1.5.1

Usage

See Creating constraints

Disclaimer

This is not an officially supported Google product