topic Re: Mapping Kubernetes to Policy Boundaries - Need Help in Open Q&A

Mapping Kubernetes to Policy Boundaries - Need Help

kranthi — Fri, 31 Oct 2025 12:42:40 GMT

Hi everyone,

does anyone know how to map Kubernetes to policy boundaries? I want users with relevant policies to view data in their console using the latest Kubernetes UI.

Re: Mapping Kubernetes to Policy Boundaries - Need Help

DanielS — Fri, 31 Oct 2025 18:28:17 GMT

Hello @kranthi. Yes you can do it based on:

storage:k8s.namespace.name - The name of the namespace.
operators: =, IN, startsWith, MATCH
storage:k8s.cluster.name - The name of the cluster.
operators: =, IN, startsWith, MATCH

for metrics, logs, spans, bizevents and events among others, please check here:

https://docs.dynatrace.com/docs/shortlink/iam-policystatements

Re: Mapping Kubernetes to Policy Boundaries - Need Help

kranthi — Fri, 31 Oct 2025 18:37:19 GMT

Hi @DanielS , Thank you for your replay

Yes, but we don't have limited name spaces right might have different namespaces like DB, Dynatrace, frontend, backend services, etc.

If possible, can i get examples of this situation along with screenshot

Re: Mapping Kubernetes to Policy Boundaries - Need Help

DanielS — Fri, 31 Oct 2025 18:51:27 GMT

Yes look at this policy and 2 different possible boundaries.

This policy is going to allow read metrics for the given namespaces detailed in IN in the boundary or the cluster names.

Re: Mapping Kubernetes to Policy Boundaries - Need Help

kranthi — Fri, 31 Oct 2025 19:01:14 GMT

@DanielS these read permissions are already added to, but the problem is with policy boundaries, because for each cluster we have multiple namespaces for each cluster, and i could not be able to decide the which name entities user is actually looking. Also, this can't change by immediately as well (Names of a Namespaces)
Kindly look at the below screenshot, maybe you will get a more idea about.

Re: Mapping Kubernetes to Policy Boundaries - Need Help

DanielS — Fri, 31 Oct 2025 19:48:33 GMT

Just to confirm, do you mean that the namespace names remain the same across different clusters?

Re: Mapping Kubernetes to Policy Boundaries - Need Help

DanielS — Fri, 31 Oct 2025 19:49:57 GMT

Are you trying to restrict the visibility so that users can only see the specific Kubernetes clusters you define?

Re: Mapping Kubernetes to Policy Boundaries - Need Help

kranthi — Mon, 03 Nov 2025 10:21:19 GMT

Nope, We have multiple clusters...In policy boundaries how could i mention which all those namespaces in boundaries to apps to get visible without any restriction on their clusters information

Re: Mapping Kubernetes to Policy Boundaries - Need Help

kranthi — Mon, 03 Nov 2025 13:45:43 GMT

Not to restrict the visibility of namespace wise. we wanted to restrict the users with cluster wise. We have couple of applications with many clusters. So, we wanted to restrict the user up to their application clusters only.

Re: Mapping Kubernetes to Policy Boundaries - Need Help

kranthi — Tue, 04 Nov 2025 16:49:17 GMT

Hi @DanielS , Any suggestion for issue

Re: Mapping Kubernetes to Policy Boundaries - Need Help

DanielS — Tue, 04 Nov 2025 17:42:39 GMT

Okay @kranthi , so if you want to restrict by cluster, why isn't the cluster boundary working for you? There's something I still don't understand about your problem.

Re: Mapping Kubernetes to Policy Boundaries - Need Help

kranthi — Tue, 04 Nov 2025 17:44:36 GMT

You mean to say do we need to create separate boundary for the cluster's boundary

Re: Mapping Kubernetes to Policy Boundaries - Need Help

DanielS — Tue, 04 Nov 2025 17:49:59 GMT

I mean that if you associate the cluster policy and its boundary to a group, and only grant access to those users who share those specific applications, you’ll ensure that they can only access information related to those clusters — depending on whether you choose metrics, logs, etc.

Re: Mapping Kubernetes to Policy Boundaries - Need Help

kranthi — Tue, 11 Nov 2025 13:15:02 GMT

Hello @DanielS , I am looking for the solution.