It would be interesting to extend the rego library with support for an annotation-based ignore.
An annotation could look like the following
konstraint/ignore: POL-0001, POL-0003
the logic could then allow to check for annotations on the object to ignore specific policies.
The policies itself should have a variable that allow this behavior, as the default should still be to enforce.
It would be interesting to extend the rego library with support for an annotation-based ignore.
An annotation could look like the following
the logic could then allow to check for annotations on the object to ignore specific policies.
The policies itself should have a variable that allow this behavior, as the default should still be to enforce.