Governance using Red Hat ACM
We have been discussing the challenges that large enterprises face in keeping different environments consistent a lot in this book. The ACM governance feature can play a crucial role in your strategy to maintain secure and consistent environments, no matter where they are running. The ACM governance feature allows you to define policies for a set of clusters and inform or enforce when clusters become non-compliant.
To define policies in ACM, you need to create three objects:
- Policy: Define the policy and remediation action that will be performed (inform or enforce).
- PlacementBinding: Bind a policy into a PlacementRule.
- PlacementRule: Rules that define which clusters the policy will be applied to.
You can see an example of a policy to check etcd encryption in all managed clusters on our GitHub. The following diagram shows what the interaction between the ACM policy objects looks like:
Figure 11.39 –...
