Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Expose all resource policy options to OPA policies #10

Open
lukehoban opened this issue Nov 11, 2021 · 0 comments
Open

Expose all resource policy options to OPA policies #10

lukehoban opened this issue Nov 11, 2021 · 0 comments
Labels
kind/enhancement Improvements or new features

Comments

@lukehoban
Copy link
Member

Currently, OPA policies are only handed the input properties of the resource in question, which is available via the input variable in the .rego file.

However, Pulumi Policies have access to a larger set of inputs from the AnalyzeRequest type - including the following in addition to input properties:

  • type
  • urn
  • name
  • options
  • provider

Ideally, these would all be available to policy evaluation in addition to input properties.

We will need to understand whether we can/should introduce these via a breaking change to the existing input variable, or via a new source that can be referenced from the .rego policies.

@lukehoban lukehoban added the kind/enhancement Improvements or new features label Nov 11, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/enhancement Improvements or new features
Projects
None yet
Development

No branches or pull requests

1 participant