enable cluster wide rules