Meta tags:

Headings (most frequently used words):

policy, controller, and, overview, stay, organized, with, collections, save, categorize, content, based, on, your, preferences, benefits, bundles, constraints, what, next, products, pricing, support, resources, engage,

Text of the page (most frequently used words):
#policy (47), and (46), the (33), controller (24), google (20), cloud (20), with (18), can (18), your (15), for (13), you (13), security (13), bundles (12), constraints (12), constraint (12), policies (11), kubernetes (11), use (11), resources (10), clusters (9), using (9), compliance (9), library (8), overview (8), thumb (7), this (7), from (7), more (6), apply (6), that (6), best (6), template (6), gke (6), audit (6), application (6), code (5), what (5), help (5), practices (5), any (5), cluster (5), management (5), português (4), español (4), down (4), content (4), are (4), custom (4), running (4), example (4), compliant (4), console (4), observability (4), common (4), documentation (4), tools (4), standards (4), about (3), samples (3), see (3), all (3), other (3), information (3), page (3), under (3), details (3), install (3), applied (3), api (3), distributed (3), these (3), enforce (3), available (3), controls (3), container (3), control (3), ensure (3), usage (3), mesh (3), fleet (3), dashboard (3), enforcement (3), troubleshoot (3), supports (3), development (3), prebuilt (3), monitoring (3), solutions (3), reference (3), guides (3), technology (3), areas (3), industry (3), pod (3), cis (3), benchmark (3), 한국어 (2), 日本語 (2), עברית (2), brasil (2), italiano (2), indonesia (2), français (2), américa (2), latina (2), deutsch (2), english (2), sign (2), terms (2), site (2), youtube (2), architecture (2), started (2), system (2), status (2), support (2), pricing (2), products (2), understand (2), need (2), last (2), updated (2), 2026 (2), utc (2), licensed (2), license (2), send (2), feedback (2), learn (2), set (2), source (2), like (2), config (2), sync (2), require (2), customization (2), beyond (2), create (2), templates (2), ability (2), enable (2), privileged (2), mode (2), which (2), containers (2), run (2), each (2), specific (2), either (2), non (2), configuration (2), violations (2), view (2), following (2), service (2), changes (2), workloads (2), requirements (2), includes (2), providing (2), get (2), built (2), comes (2), full (2), both (2), admission (2), multiple (2), platform (2), terraform (2), metrics (2), integrated (2), based (2), open (2), company (2), roles (2), tasks (2), engine (2), sdk (2), languages (2), frameworks (2), infrastructure (2), costs (2), access (2), storage (2), networking (2), migration (2), hybrid (2), multicloud (2), databases (2), data (2), analytics (2), pipelines (2), compute (2), hosting (2), monitor (2), pci (2), dss (2), nist (2), 800 (2), cross (2), product (2), close (2), subscribe, newsletter, our, third, decade, climate, action, join, manage, cookies, privacy, tech, twitter, events, blog, engage, training, certification, center, getting, github, release, notes, community, forums, contact, sales, marketplace, easy, easytounderstand, solved, problem, solvedmyproblem, otherup, hard, hardtounderstand, incorrect, sample, incorrectinformationorsamplecode, missing, missingtheinformationsamplesineed, otherdown, tell, except, otherwise, noted, java, registered, trademark, oracle, its, affiliates, developers, apache, creative, commons, attribution, next, directly, centralized, git, repository, just, few, provided, included, contains, numerous, limit, risk, also, gives, over, unrestricted, whether, not, ensures, attempt, pull, unknown, sources, denied, protecting, potentially, malicious, software, restrict, repositories, given, image, pulled, used, accurate, tracking, resource, consumption, when, metering, namespace, have, least, one, label, enforces, objects, called, think, building, blocks, defines, change, allowed, disallowed, actively, block, requests, report, case, warning, messages, violation, occurred, remediate, problems, individual, provides, list, currently, strengthen, posture, general, vulnerabilities, compatible, but, added, before, enforcing, ensuring, aren, disruptive, many, same, podsecuritypolicies, number, grouped, standard, theme, state, including, unregistered, opinionated, recommendations, resolve, required, additionally, include, addition, optionally, prior, analyse, catch, shift, left, approach, points, admins, cli, connected, works, services, benefits, enables, programmable, act, project, fully, agent, gatekeeper, guardrails, administrators, operators, specialists, who, define, accordance, strategy, within, meet, organizational, maintaining, automation, user, explains, how, secure, manner, save, categorize, preferences, stay, organized, collections, home, dashboards, migrate, configmanagement, policycontroller, configure, high, availability, mutate, stop, exclude, namespaces, webhook, maintain, validate, apps, against, pipeline, write, nsa, cisa, hardening, guide, 190, rev, mitre, essentials, anthos, cost, reliability, practice, restricted, baseline, provision, discover, start, free, skip, main,

Text of the page (random words):
policy controller overview google cloud documentation skip to main content technology areas close ai and ml application development application hosting compute data analytics and pipelines databases distributed hybrid and multicloud industry solutions migration networking observability and monitoring security storage cross product tools close access and resources management costs and usage management infrastructure as code sdk languages frameworks and tools console english deutsch español español américa latina français indonesia italiano português português brasil עברית 中文 简体 中文 繁體 日本語 한국어 sign in google kubernetes engine gke policy controller documentation start free overview guides reference resources technology areas more overview guides reference resources cross product tools more console discover policy controller overview gke documentation get started install policy controller provision policy controller resources with terraform apply best practices with policy bundles policy bundles overview apply multiple policy bundles use kubernetes standards policy constraints cis gke benchmark 1 5 cis kubernetes benchmark 1 5 cis kubernetes benchmark 1 7 pod security policy pod security standards baseline pod security standards restricted use best practice policy constraints cost and reliability anthos service mesh security policy essentials use industry standards policy constraints mitre nist sp 800 53 rev 5 nist sp 800 190 nsa cisa kubernetes hardening guide pci dss 3 2 1 pci dss 4 0 apply policies use the constraint template library write a custom constraint template audit using constraints validate apps against company policies in a ci pipeline create policy compliant google cloud resources maintain exclude namespaces from the admission webhook stop policy controller mutate resources configure for high availability migrate from configmanagement to policycontroller monitor monitor compliance with dashboards use policy controller metrics troubleshoot troubleshoot policy controller ai and ml application development application hosting compute data analytics and pipelines databases distributed hybrid and multicloud industry solutions migration networking observability and monitoring security storage access and resources management costs and usage management infrastructure as code sdk languages frameworks and tools home technology areas google kubernetes engine gke policy controller documentation guides send feedback policy controller overview stay organized with collections save and categorize content based on your preferences this page explains what policy controller is and how you can use it to help ensure your kubernetes clusters and workloads are running in a secure and compliant manner this page is for it administrators operators and security specialists who define it solutions and system architecture in accordance with company strategy and ensure that all resources running within the cloud platform meet organizational compliance requirements by providing and maintaining automation to audit or enforce to learn more about common roles and example tasks that we reference in google cloud content see common gke user roles and tasks policy controller enables the application and enforcement of programmable policies for your kubernetes clusters these policies act as guardrails and can help with best practices security and compliance management of your clusters and fleet based on the open source open policy agent gatekeeper project policy controller is fully integrated with google cloud includes a built in dashboard for observability and comes with a full library of prebuilt policies for common security and compliance controls policy controller benefits integrated with google cloud platform admins can install policy controller by using the google cloud console by using terraform or by using google cloud cli on any cluster connected to your fleet policy controller works with other google cloud services like config sync metrics and cloud monitoring supports multiple enforcement points in addition to both audit and admission control for your cluster policy controller can optionally enable a shift left approach to analyse and catch non compliant changes prior to application prebuilt policy bundles policy controller comes with a full library of prebuilt policies for common security and compliance controls these include both policy bundles and the constraint template library supports custom policies if policy customization is required beyond what is available using the constraint template library policy controller additionally supports the development of custom constraint templates built in observability policy controller includes a google cloud console dashboard providing an overview for the state of all the policies applied to your fleet including unregistered clusters from the dashboard view compliance and enforcement status to help you troubleshoot and get opinionated recommendations to resolve policy violations policy bundles you can use policy bundles to apply a number of constraints that are grouped under a specific kubernetes standard security or compliance theme for example you can use the following policy bundles enforce many of the same requirements as podsecuritypolicies but with the added ability to audit your configuration before enforcing it ensuring any policy changes aren t disruptive to running workloads use constraints compatible with cloud service mesh to audit the compliance of your mesh security vulnerabilities and best practices apply general best practices to your cluster resources to help strengthen your security posture policy controller bundles overview provides more details and a list of currently available policy bundles constraints policy controller enforces your clusters compliance using objects called constraints you can think of constraints as the building blocks of policy each constraint defines a specific change to the kubernetes api that is allowed or disallowed on the cluster it s applied to you can set policies to either actively block non compliant api requests or audit the configuration of your clusters and report violations in either case you can view warning messages with details on what violation occurred on a cluster with that information you can remediate problems for example you can use the following individual constraints require each namespace to have at least one label this constraint can be used to ensure accurate tracking of resource consumption when using gke usage metering for example restrict the repositories a given container image can be pulled from this constraint ensures any attempt to pull containers from unknown sources is denied protecting your clusters from running potentially malicious software control whether or not a container can run in privileged mode this constraint controls the ability of any container to enable privileged mode which gives you control over which containers if any can run with unrestricted policy these are just a few of the constraints provided in the constraint template library included with policy controller this library contains numerous policies that you can use to help enforce best practices and limit risk if you require more customization beyond what is available in the constraint template library you can also create custom constraint templates constraints can be applied directly to your clusters using the kubernetes api or distributed to a set of clusters from a centralized source like a git repository by using config sync what s next install policy controller learn about policy bundles apply policy bundles send feedback except as otherwise noted the content of this page is licensed under the creative commons attribution 4 0 license and code samples are licensed under the apache 2 0 license for details see the google developers site policies java is a registered trademark of oracle and or its affiliates last updated 2026 07 17 utc need to tell us more easy to understand easytounderstand thumb up solved my problem solvedmyproblem thumb up other otherup thumb up hard to understand hardtounderstand thumb down incorrect information or sample code incorrectinformationorsamplecode thumb down missing the information samples i need missingtheinformationsamplesineed thumb down other otherdown thumb down last updated 2026 07 17 utc products and pricing see all products google cloud pricing google cloud marketplace contact sales support community forums support release notes system status resources github getting started with google cloud code samples cloud architecture center training and certification engage blog events x twitter google cloud on youtube google cloud tech on youtube about google privacy site terms google cloud terms manage cookies our third decade of climate action join us sign up for the google cloud newsletter subscribe english deutsch español español américa latina français indonesia italiano português português brasil עברית 中文 简体 中文 繁體 日本語 한국어