| title | rootform validate policy |
|---|---|
| description | Validate a Policy definition |
Validate a Policy definition.
rootform validate policy <identifier> [options]
| Flag | Type | Default | Description |
|---|---|---|---|
--dialect |
stringArray |
[] |
use Dialect source dir for this command only; repeatable |
--format |
string |
"" |
output format: text|json; default: text |
--policy-pack |
stringArray |
[] |
add or replace the Policy Pack at path, a source directory or a compiled file, for this command only; repeatable |
--project |
string |
"" |
read rootform.lock from project dir; paths stay relative to the working directory; default: the working directory |
| Flag | Type | Default | Description |
|---|---|---|---|
-h, --help |
bool |
false |
show how to use rootform validate policy |
--color |
mode |
auto |
color human output: auto|always|never; default: auto |
--no-pager |
bool |
false |
print a long report in full instead of opening it in less |
Validate a Policy definition in its selected Policy Pack.
The project must select the Policy Pack that owns the Policy, or --policy-pack must name its source directory for this command only. Use <policy-pack>.policy.<name>, <policy-pack>/<name>, or a bare name when it resolves unambiguously.
The text or JSON result goes to standard output. Diagnostics go to standard error.
| Status | Description |
|---|---|
0 |
the definition is valid |
1 |
the definition is not valid, or no definition has that name |
2 |
the command was used incorrectly |
3 |
rootform.lock is invalid or the name is ambiguous |
4 |
rootform.lock or definitions could not be read, or the report could not be written |
rootform validate policy baseline.policy.cluster-network-context
rootform validate policy cluster-network-context
rootform validate policy cluster-network-context --policy-pack ./policies
rootform validate policy baseline.policy.cluster-network-context --format json