OPA Policy Exception Management
pending feedback
V
Vivacious Leopard
We are looking for a centralized mechanism within Harness where policy exceptions can be recorded, reviewed/approved with validity periods, and then automatically considered during OPA policy evaluation so that approved exceptions do not result in policy enforcement failures.
With this managing and tracking OPA policy exception within the Harness UI would really help to provide better control.
Log In
a
abhijit.pujare
updated the status to
pending feedback
a
abhijit.pujare
Would custom approvals solve your use case here: https://developer.harness.io/docs/platform/approvals/custom-approvals/#review-custom-approval-stages-and-steps
What you can do is you can set up a custom approval step in a pipeline which runs a script and if the scripts fails you can set the Failure strategy action as manual intervention: https://developer.harness.io/docs/platform/pipelines/failure-handling/define-a-failure-strategy-on-stages-and-steps#failure-strategy-actions
so someone can go and approve it within a validity period.
V
Vivacious Leopard
abhijit.pujare OPA policy gets evaluated before pipeline gets into any script execution right. So, this wouldn't help us any more.
What is currently missing is - OPA policy should have an inventory where it can validate which pipeline/project/org is exempted from particular Policy evaluation logic.