Agentic Data Plane

rpk ai policy

Manage Cedar authorization policies (create, get, list, update, delete).

This command was introduced in ai version 0.2.26.

Usage

rpk ai policy [flags]

Subcommands

Command Description

rpk ai policy apply

Reconcile policies from one or more YAML manifests. For each manifest: create the resource if absent, otherwise update every field that differs from the live resource.

rpk ai policy create

Create a Cedar authorization policy: the allow/deny gate that decides WHETHER a principal may call a tool.

rpk ai policy delete

Delete a policy.

rpk ai policy diff

Dry-run of apply for policies. Prints, per manifest, whether apply would create, update (and which fields), or leave the resource unchanged.

rpk ai policy get

Get a policy.

rpk ai policy list

List policies.

rpk ai policy update

Update a policy in place. Only the flags you pass are written; the field mask is built from the flags actually set, so omitted fields are left untouched.

Global flags

Value Type Description

--config

string

Redpanda or rpk config file; default search paths are ~/.config/rpk/rpk.yaml, $PWD/redpanda.yaml, and /etc/redpanda/redpanda.yaml.

-X, --config-opt

stringArray

Override rpk configuration settings; -X help for detail or -X list for terser detail.

--ignore-profile

bool

Ignore rpk.yaml and redpanda.yaml; use default settings.

--profile

string

rpk profile to use.

-v, --verbose

bool

Enable verbose logging.