Policy configuration¶
Paths in the tables are relative to [policy]. Validate a policy file with
gdsgate authority policy validate <PATH> and the configuration with
gdsgate doctor --config <PATH> --json. See the
policy lifecycle guide.
[policy]¶
Used by: Authority.
| Key | Type | Default | Purpose |
|---|---|---|---|
path |
optional string | unset, deny-all bootstrap policy | Path to a Cedar policy document Authority loads at startup. The bootstrap policy denies every action. |
The policy is validated in strict mode against the gdsgate Cedar schema when it
loads. The file is used only when the store has no policy. After that, edit the
live policy with gdsgate authority policy pull / push; changes apply
without a restart and require editPolicy.
gdsgate authority policy template
prints a starting policy. Schema and patterns: Policy.