<p>In the Kubernetes documentation for controlling-access to the API server, under the <a href="https://kubernetes.io/docs/concepts/security/controlling-access/#authorization" rel="nofollow noreferrer">Authorization section</a> it says that authorization is controlled through a Policy.</p>
<p>However, a Policy is not found as an API resource:</p>
<pre><code>❯ k api-resources | grep -i policy
networkpolicies                   netpol              networking.k8s.io/v1                   true         NetworkPolicy
poddisruptionbudgets              pdb                 policy/v1                              true         PodDisruptionBudget

❯ kubectl version --short
Flag --short has been deprecated, and will be removed in the future. The --short output will become the default.
Client Version: v1.25.2
Kustomize Version: v4.5.7
Server Version: v1.25.3+k3s1
</code></pre>
<p>So what exactly is a Policy?  How is it setup?</p>
<p>The docs are not very clear on this point.</p>

<blockquote>
<p>...under the Authorization section it says that authorization is controlled through a Policy.</p>
</blockquote>
<p>The sample you saw is a cluster that uses ABAC. From your screenshot your cluster is likely to use RBAC which access policy is not used.</p>
<blockquote>
<p>So what exactly is a Policy? How is it setup?</p>
</blockquote>
<p>Here's the official documentation for <a href="https://kubernetes.io/docs/reference/access-authn-authz/abac/" rel="nofollow noreferrer">Attribute-based access control</a></p>
