Methods, systems, and computer-readable storage media for executing, by a policy controller, a policy custom resource that defines a policy to be applied to target resources within a cluster of a cloud computing platform, the policy custom resource including a policy target defining parameters for identifying a resource as a target resource, a policy condition defining conditions of a target resource that are to be evaluated, and a policy action defining actions that are to be executed in response to the conditions evaluating to true, receiving, by the policy controller, a set of target resources based on the policy target of the policy custom resource, evaluating, by the policy controller and for each target resource in the set of target resources, the policy condition, and in response to the policy condition returning as true for a target resource, executing the policy action for the target resource.