I undestand your answer, what triggers me is the following: If I fix the env variables on the policy through UI, these propagate to clusters to which that policy is assigned, instead via Terraform, as per your answer, you need to specify the variables inside the cluster itself.