GoogleCloudPlatform / policy-library

A library of constraint templates and sample constraints for Constraint Framework tools
Apache License 2.0
223 stars 128 forks source link

Add exclude list to GCPCMEKRotationConstraintV1 #208

Open ocervell opened 5 years ago

ocervell commented 5 years ago

We need to add an exclude for the GCPCMEKRotationConstraintV1, because once created, KMS keychains cannot be removed. As long as we don't have the 'delete keychain' option in the KMS API, we should be able to exclude unused keychains.

briantkennedy commented 4 years ago

I'm not sure what the ask here is, should this be in policy-library?

morgante commented 4 years ago

Moved to policy-library.