Create ETCD Encryption Policy (Web Console)

Open the ACM console on the hub.

Navigate to Governance → Policies .

Click Create policy .

Set Name : policy-etcd.

Choose the policy template/type ETCD Encryption .

Set Remediation action to enforce .

inform = report only

enforce = attempt to automatically remediate to desired state

Select clusters/ClusterSets to apply (depends on the wizard).

Click Submit .

Verify compliance once applied:

In console, check policy status: Compliant/NonCompliant

Or via CLI:

oc get policy -A

oc describe policy policy-etcd -n < policy-namespace >

Why this matters:

Governance policies are a core ACM feature for enforcing security baselines across multiple clusters.