search

pulumi / pulumi-policy-opa

A bridge enabling Pulumi CrossGuard to run OPA rules
12 stars 5 forks source link

Expose all resource policy options to OPA policies #10

Open lukehoban opened 2 years ago

lukehoban commented 2 years ago

Currently, OPA policies are only handed the input properties of the resource in question, which is available via the input variable in the .rego file.

However, Pulumi Policies have access to a larger set of inputs from the AnalyzeRequest type - including the following in addition to input properties:

Ideally, these would all be available to policy evaluation in addition to input properties.

We will need to understand whether we can/should introduce these via a breaking change to the existing input variable, or via a new source that can be referenced from the .rego policies.