Skip to content

kindgi gate-policies

Gate policies: what a promotion of an agent must show before a version goes live for a scope (list / show / versions / publish / unregister / reinstate).

List gate policies (each one's latest active version), for an agent or a scope.

Terminal window
kindgi gate-policies list [--agent=<agent-id>] [(--tenant | --org=<org-id> | --project=<project-id> [--segment=<key:value>]…)] [--limit=<n>] [--cursor=<cursor>] [--table]

Flags:

  • --agent <value>: Only the policies gating this agent.
  • --cursor <value>: The next page, from nextCursor.
  • --limit <value>: Page size.
  • --org <value>: An org, by id.
  • --project <value>: A project, by id; with --segment, a segment in it.
  • --segment <value>: One step of the segment path, key:value (e.g. company:acme); repeat it in order, coarse to fine. Needs --project. (repeatable)
  • --tenant: The whole tenant.

Show a gate policy's latest active version, or one version.

Terminal window
kindgi gate-policies show <policy-id> [<version>]

List a gate policy's versions, unregistered ones too.

Terminal window
kindgi gate-policies versions <policy-id> [--table]

Publish a gate policy, or a new version of one: what a promotion of the agent for the scope must show (the spec: comparison, evidence, metrics, replay, approvals). Needs admin on the tenant.

Terminal window
kindgi gate-policies publish <policy-id> --policy-version=<semver> --agent=<agent-id> (--tenant | --org=<org-id> | --project=<project-id> [--segment=<key:value>]…) --spec='<json>'|@<file> [--description=<text>]

Flags:

  • --agent <value>: The agent the policy gates.
  • --description <value>: What the policy is for.
  • --org <value>: An org, by id.
  • --policy-version <value>: The version to publish (semver).
  • --project <value>: A project, by id; with --segment, a segment in it.
  • --segment <value>: One step of the segment path, key:value (e.g. company:acme); repeat it in order, coarse to fine. Needs --project. (repeatable)
  • --spec <value>: The checks, as JSON, inline or @<file>.
  • --tenant: The whole tenant.

Unregister a gate policy version: the policy's latest remaining active version applies, or the scope above's policy.

Terminal window
kindgi gate-policies unregister <policy-id> <version>

Reinstate an unregistered gate policy version.

Terminal window
kindgi gate-policies reinstate <policy-id> <version>

Every command also takes the global flags.