Understand policy bundles and how they are used to implement business and technical policy.
Kyndryl Bridge Policy Service
is a general-purpose and pluggable Policy Service built on Open Policy Agent (OPA). OPA enables
separation of concerns
by decoupling business policy evaluation from application logic, moving policy decisions to a dedicated service layer. This architectural approach promotes better maintainability, testability, and flexibility in enterprise environments.
The key to implementing policy is through the use of
Policy Bundles
. A policy Bundle is A Policy Bundle is a package in the form of a tar or gz file that contains policy rules, written in Rego, and configuration data.
The Policy service provides a Policy Bundles page, which is your main hub for viewing and managing all policy bundles linked to your account. The page contains summary indicators that summarize the current state of your policy bundle library:
Total Bundles: All policy bundles in your account
Published: Bundles that are available for use
Created: Bundles that have been set up but not yet published
Use the search bar to quickly find policy bundles. You can filter by any field shown in the table, such as name, version, or status.
The dashboard also contains a policy bundle table, which provides the following policy bundle details:
Policy Bundle Name: The name you gave the bundle
Version: The current version number Status:
Created: Bundle is created but not published
Published: Bundle is available for use
Last Update: When the bundle was last changed
Depending on your permissions, you can take the following actions
View: See details of a policy bundle
Edit: Make changes to a bundle
Publish: Make a bundle available for use
Download: Download a policy bundle in .tar.gz format
Evaluate: Test a bundle Delete: Remove a bundle
If you have multiple bundles, use the pagination controls at the bottom of the page to move between pages or adjust how many bundles you see at once.
Creating Policy Bundles
Use the following procedure to create a new policy:
Go to the Policy Management Page.
Open the Bridge menu and navigate to:
Administration > Policy Service > Policy Management (Bundles)
.
Click
+ Create Bundle
button.
Complete the form.
Policy Bundle Key (a unique identifier for your bundle)
Description (what your bundle does)
Git Connection (select your GitHub connection)
Click
Create Bundle
.
Your new Policy Bundle will appear on the Policy landing page with the status
Created
.
Managing Policy Bundles
The Policy services supports three activities to enable managing and maintaining policy bundles:
Viewing
Editing
Deleting
Viewing Policy Bundles
Use the following procedure to view existing Policy Bundles:
Navigate to the Policy Management Page.
Open the Bridge menu and navigate to:
Administration > Policy Service > Policy Management (Bundles)
.
Select the Policy Bundle.
The service presents the following bundle details:
Policy Bundle Name
Version (latest available version)
Status (policy bundle status)
Last Update (last policy bundle update)
For more details, click the action icon (
...
) and select any of the following:
View
for the policy bundle key (a unique identifier for the bundle)
Description
of what the bundle does
Git Connection
( GitHub connection set)
Editing Policy Bundles
Use the following procedure to edit policy bundles:
Navigate to the Policy Management Page.
Open the Bridge menu and navigate to:
Administration > Policy Service > Policy Management (Bundles)
.
Select the Policy Bundle.
To edit the Policy Bundle, click the action icon (
...
) and select any of the following:
View
for the policy bundle key (a unique identifier for the bundle)
Description
what the bundle does
Git Connection
GitHub connection set
Deleting a Policy Bundle
Use the following procedure to delete policy bundles:
Navigate to the Policy Management Page.
Open the Bridge menu and navigate to:
Administration > Policy Service > Policy Management (Bundles)
.
Select the Policy Bundle.
Click the action icon (
...
). The service displays a dropdown menu.
Select
Delete
.
Publishing Policy Bundles
After a Policy Bundle has been created, you can publish it so that it can be downloaded as a tar.gz file for evaluation.
Publish Procedure
Use the following procedure to publish your Policy Bundle:
Navigate to the Policy Management Page.
Open the Bridge menu and navigate to:
Administration > Policy Service > Policy Management (Bundles)
.
Select the Policy Bundle.
Click the action icon (
...
). The service displays a dropdown menu.
Click
Publish
.
Download Procedure
Use the following procedure to download the Policy Bundle:
Navigate to the Policy Management Page.
Open the Bridge menu and navigate to:
Administration > Policy Service > Policy Management (Bundles)