Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Setting UseOnlinePolicyStore to false does not support custom organization policies #808

Open
Nissplus opened this issue Oct 28, 2019 · 0 comments

Comments

@Nissplus
Copy link

Title

Setting UseOnelinePolicyStore to false does not support custom organization policies

Description

Feature request.
Some enterprises have policies restricting the use of Azure storage accounts (FinTech and data exfiltration concerns are one misuse case).

There is no documented (easy) way to create an organization extension according to the instructions at Extending AzSK Modules while disabling UseOnlinePolicyStore.

Steps to reproduce

  1. In AzSKSettings.json, set UseOnlinePolicyStore: false
  2. Follow the instructions in 'Extending AzSK Modules
  3. Run a test and the *.ext.ps1 files are ignored

Expected behavior

A parameter like Get-AzSKOrganizationPolicyStatus -PolicyFolderPath LOCALEXTENSIONS
would allow for local extensions to be made and kept local.

Actual behavior

*.ext.ps1 files are ignored

As a work-around, one can fork the AzSK DevOpsKit and place the extensions directly in the forked SVT/* directory code. At that point the UseOnelinePolicyStore: false, will work, but this requires forking and altering AzSK.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant