Convert a Cluster to an Inventory Filter
Convert a cluster to an inventory filter if:
-
You do not want the cluster to be modified by future automatic policy discovery runs, as a more versatile alternative to approving the cluster.
-
You want the cluster to be independent of the workspace and workspace version.
-
You are creating or discovering policies in which the consumer and provider belong to different scopes, and you want to create policies specific to a subset of workloads in a scope, not just policies involving the entire scope.
You must use inventory filters instead of clusters for this purpose if you create cross-scope policies using the advanced method described in When Consumer and Provider Are in Different Scopes: Policy Options and you want policies to be more granular than scope-to-scope.
Procedure
| 1 |
Navigate to the workspace that contains the cluster to promote. |
| 2 |
Click Manage Policies. |
| 3 |
Click Filters. |
| 4 |
Click Clusters. |
| 5 |
Click the cluster you want to use in the cross-scope policy. |
| 6 |
In the panel on the right, in the Cluster Actions section, click |
| 7 |
Verify that the name, description, and query are as expected. |
| 8 |
Select Restrict Query to Ownership Scope. (Inventory filters can cross scope boundaries, but you do not want this behavior for this purpose; you want this filter to include only workloads in this scope.) |
| 9 |
If you want the application defined by this inventory filter to be the provider in policies generated during automatic policy discovery, select Provides a service external of its scope. If this application is a consumer rather than a provider, or if you will use this inventory filter only for manually created policies, you don't need to enable this option. |
| 10 |
Click Promote Cluster. |
| 11 |
Verify that the cluster has moved to the Inventory Filters tab. You may need to refresh the page to see this change. |
(Promote to Inventory Filter.)