►
From YouTube: VMware Cloud PKS Policies Framework Demo
Description
In this demo, we go over the basic steps on how to set up a policy framework for new users and clusters on VMware Cloud PKS.
To learn more, visit https://cloud.vmware.com/vmware-cloud-pks
A
Vmware
cloud
PJs
policy
framework
demo
in
this
video.
We
are
going
to
take
a
look
at
the
policy
framework
that
VMware
cloud
pikas
offers
where
McLouth
PKS
has
a
resource,
centric
policy
model
that
is
article
in
nature
and
allows
IT
operators
to
provide
very
fine
granular
access
to
cluster
resources
when
we're
cloud
peak
is
policy.
Framework
starts
with
the
organization
within
the
organization
you
have
folders.
Folders
can
be
a
logical
set
of
users
that
are
grouped
together
because
they
are
aligned
on
a
specific
business
unit
or
geography
within
a
folder.
A
A
A
Similarly,
if
a
policy
is
applied
at
the
folder
level,
then
all
projects-
small
clusters
within
the
folder
were
inherent
the
policy
going
a
bit
lower
in
the
Harkey.
If
a
policies
applied
at
the
project
level,
then
all
small
clusters
belong
to
the
project
will
inherit
the
policy
and
finally,
policy
applied
at
the
cluster
level
applies
only
to
the
specific
cluster
how
this
works
in
a
live
demo
within
my
work,
I
have
five
folders.
A
Each
folder
is
grouped
based
on
different
business
units.
Now,
let's
take
a
look
at
the
Acme
web
services
folder
within
Acme
web
services,
I
have
different
set
of
users
working
on
different
projects,
for
example,
some
are
working
on
the
front
end.
Some
are
working
on
the
databases
and
some
needs
a
dev
environment
to
test
their
application,
and
we
think
each
project
have
different
clusters.
Small
clusters,
let's
create
a
dev
group
and
apply
this
new
group
to
the
Acme
web
services,
folder.
A
Once
the
group
is
created,
you
will
go
to
the
folder
and
click
on
the
view
policies
and
once
you
open
the
policies
window
against
a
resource,
there
are
two
set
of
policies:
one
is
the
inherent
policy
and
then
you
also
have
a
direct
policy.
The
inherent
and
policy
are
set
against
its
parent
to
edit
the
inherent
policy.
You
must
go
to
its
parent
and
make
the
modification
there
and
all
the
changes
will
be
automatically
propagated
to
his
children.
A
Then
you
can
use
the
native
cube
C
document
to
retrieve
the
cluster
binding
information
against
the
row.
Now,
let's
take
a
look
at
that
start.
Logging
into
my
environment
and
I
will
encourage
everyone
to
watch
my
previous
video
to
login
to
my
cloud.
Pks
account.
What
I
need
to
do
is
I
need
to
obtain
the
information,
the
UID
of
my
work.
As
far
as
the
the
the
refresh
token,
my
previous
video,
has
a
section
that
reviews
on
where
on
the
web
interface,
you
can
obtain
those
information.
A
Now,
once
the
information
is
obtained,
what
I'm
going
to
do
is
I'm
going
to
supply
that
information
and
then,
when
I
log
in
I'm
successfully
logged
in
and
once
I
logged
in
I'm
gonna
set
my
folder
to
Acme
Web
Services
now
I
could
set
the
policy
at
the
folder
level,
but
I
already
showed
you
guys
how
to
do
that
in
the
previous
UI
demo.
So
what
I'm
gonna
do
now
is
I'm
gonna
actually
set
the
policy
on
the
cluster
itself.
So
in
order
to
do
that,
I
need
to
set
the
project.
A
And,
as
you
can
see,
it
added
a
direct
policy
against
the
cluster
dev
and
I
have
a
lot
of
inherent
policies
as
well,
and
those
policies
were
set
against
the
parent.
The
this
is.
This
was
the
policy
that
we
set
from
the
earlier
demo
from
the
UI,
and
you
can
see
that
the
group
dev
is
also
mapped
to
the
smart
cluster
admin
and
now
once
this
is
on
set
I'm
going
to
then
log
in
to
my
kubernetes
cluster,
and
confirm
that
the
policy
for
the
cluster
admin
role
has
been
propagated.