Anthos Config Management – Policy Controller Library

Contents

• Background
• Enabling Policy Controller
• Policies
• Usage
• Disclaimer

Background

Policy Controller, part of Anthos Config Management, is a Kubernetes dynamic admission controller that checks, audits, and enforces your clusters' compliance with policies related to security, regulations, or arbitrary business rules.

Policy Controller policies are broken up into two separate objects: Constraints and ConstraintTemplates. Having two disticint objects allows for separation of the policy definition (ConstraintTemplate) and policy enforcement (Constraint).

This repository contains ConstraintTemplate and example Constraint objects for use with Anthos GKE and Anthos Service Mesh.

Enabling Policy Controller

See Installing Policy Controller

Policies

• Anthos GKE (coming soon)
• Anthos Service Mesh

Usage

See Creating constraints

Disclaimer

This is not an officially supported Google product