Nuon Policy Creator

Generate Nuon compliance and security policies using OPA Rego. Policies validate components at build time (container images) or deploy time (Terraform, Helm) and can block or warn on violations.

Key Concepts

• Policy types — container_image (build-time), terraform_module (deploy-time), helm_chart (deploy-time)
• Policy engine — opa (Open Policy Agent using Rego)
• deny rules — block the build or deployment step
• warn rules — log a warning but allow the step to continue
• components — list of component names to apply the policy to, or ["*"] for all

Discovery Process

1. What component types are in scope? (container images, Terraform modules, Helm charts)
2. What should be enforced vs warned? (hard blocks vs advisory)
3. Which specific components, or should it apply to all?
4. What are the compliance requirements? (image signing, encryption, resource limits, tags, etc.)