chainctl policies custom

chainctl policies custom

Manage your custom policies.

Synopsis

Manage the lifecycle of your organization’s custom policies: validate a manifest before submitting, create a new policy, update an existing one, and delete when it’s no longer needed.

A custom policy is a Rego expression paired with a single supported resource type and an optional parameter schema. Each policy is identified by (name, resource type) within an organization.

The supported resource type is set at create time and cannot be changed afterwards.

Options inherited from parent commands

      --api string         The url of the Chainguard platform API. (default "https://console-api.enforce.dev")
      --audience string    The Chainguard token audience to request. (default "https://console-api.enforce.dev")
      --config string      A specific chainctl config file. Uses CHAINCTL_CONFIG environment variable if a file is not passed explicitly.
      --console string     The url of the Chainguard platform Console. (default "https://console.chainguard.dev")
      --force-color        Force color output even when stdout is not a TTY.
  -h, --help               Help for chainctl
      --issuer string      The url of the Chainguard STS endpoint. (default "https://issuer.enforce.dev")
      --log-level string   Set the log level (debug, info) (default "ERROR")
  -o, --output string      Output format. One of: [csv, env, go-template, id, json, markdown, none, table, terse, tree, wide]
  -v, --v int              Set the log verbosity level.

SEE ALSO

• chainctl policies - Manage policies.
• chainctl policies custom create - Create a custom policy.
• chainctl policies custom delete - Delete a custom policy.
• chainctl policies custom update - Update a custom policy.
• chainctl policies custom validate - Validate a custom policy manifest or expression without persisting it.