Creating a Policy

To create a new policy, use the policy init command:

policy init

You'll be asked to select a server. Assuming you've logged in to the Aserto Policy Registry, you'll be able to select from following:

  #  SERVER
  1  opcr.io
  2  registry.prod.aserto.com

> Select server#:

If you haven't logged in to the Aserto Policy Registry, you'll only see the opcr option. After selecting a server you'll be asked to confirm your choice, or otherwise override it with a different value:

server: (registry.prod.aserto.com):

Hitting "Enter" will confirm your choice. Otherwise, provide a different value and hit "Enter".

Next, provide your username in the policy registry you've selected:

> user  : ([YOUR_USER_NAME]):

Provide the name of the secret containing the Github token you'd like to use (by default, the name should be GITHUB_TOKEN)

> github secret name: (GITHUB_TOKEN): GITHUB_TOKEN

Specify the name of the repository you'll be pushing the policy to:

> repo  : (): [YOUR-ORGANIZATION]/[POLICY-NAME]

The following directory structure will be created:

.
├── .github
│   ├── config.yaml
│   └── workflows
│       └── build-release-policy.yaml
├── .gitignore
└── src
    ├── .manifest
    └── policies
        └── hello.rego

Update the content of the policy as needed, then follow the steps to build, tag and push the policy to OPCR.