Parametrize opa bundle job to be optional
- The current opa deployment job relies on community to be always up and running, which is not always true, thus, job actually does not use identity to login to the storage account, it uses the storage keys, which requires higher privileges over storage account, and uses the az cli image, which gets updated without further noticing, this approach it is prone to failure.
- For some customers we would like to onboard our own policy bootstrap with pre-loaded policies or even better, customized policies, in this case this job it is obsolete, this MR gives possibility to disable policy bootstrap job, and allows to use custom job.
Merge request reports
Activity
changed milestone to %M25 - Release 0.28
added Azure label
requested review from @lucynliu, @ajojohnk, @sakethsomaraju, @mmuralidhar, and @jordanchiu
assigned to @heba92
@jordanchiu Please review and approve. Thanks.
More info on policy and policy bundles can be found here.
mentioned in commit 30a22c42
Please register or sign in to reply