# Policy Profiles

Profile uses [**OPA**](https://www.openpolicyagent.org/) (Open Policy Agent) to centralize operational, security, and compliance.

*Select organization* for a better overview of Alerting Profiles.

Accessing the page you can see the overview of all created profiles with selected rules and associated projects.

![Fig. 1: Policy Profiles](/files/BHTn6Md0GOYEU33wntAg)

Each profile can be:

<img src="/files/-McTcbB-au4V6R_9I-LI" alt="" data-size="original">/<img src="/files/-McTchESBHx_eCS1Ew3a" alt="" data-size="original"> Un/lock profile - if you lock the profiles, you can't use them for new Project, edit or delete them

<img src="/files/-Mk6hyRbUTQuKygF4kbB" alt="" data-size="original"> Delete - delete non-used and unlocked profiles

<img src="/files/-Mk6hrUl1O_c_YKd85jN" alt="" data-size="original">Update Profile - update policy profile

<img src="/files/-MkBnfDn8DMqyiLXFmzg" alt="" data-size="original">Make default - choose profile which will be then filled during project creation, lighter color indicates selected credentials

### Add Policy Profile

![Fig. 2: Add Policy Profile](/files/0ntDfl6rZyLn6zWIjyCu)

*Name* - choose name for the profile

**Features:**

*Forbid NodePort*

*Forbid http ingresses*

*Require Probe*

**Add:**

*Allowed Repositories*

*Forbid Specific Tags*

*Ingress Whitelist*

### Add Profile to the Project

You can add the profile during project creation - choosing from drop down selection.

![Fig. 3: Add Policy during Project creation](/files/Oe60yud1bqdcb59LM0zU)

Enforce Policies after the project is created. You can disable it the same way.

![Fig. 4: Add Policy after Project is created](/files/6kb2cz5akRCUqcQU5hYA)

{% hint style="warning" %}
Please keep in mind that namespaces *monitoring*, *velero* and *kube-system* **violate** these policies.
{% endhint %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://itera.gitbook.io/taikun/partner/policy-profiles.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.