Skip to content

Add Policy Assignment to the Dependency Pipeline for the Policy Exemption Module #666

@ahmadabdalla

Description

@ahmadabdalla

Description

The Policy Exemption Module has a dependency on a Policy Assignment to be there. Previously we did not have the remove module script apply to Policy Assignments, hence these policies were always there for the Exemption module. Now that we remove policy assignments by default, the exemption will not work as the Policy Assignment Resource ID does not exist.

Steps to reproduce

  1. Deploy a Policy Assignment with removeModule set to true (default behavior)
  2. Deploy the Policy Exemption module.

Workaround

Should NOT be used going forward so that we align with other modules but tested it so that I can test the exemption pipeline.

  1. Deploy a Policy Assignment with removeModule set to false (this will always be reverted when main branch runs)
  2. Deploy the Policy Exemption module.

Solution

  • Create a Policy Assignment example in the dependency pipeline and deploy the dependency pipeline
  • Modify the Policy Exemption Module to use that new policy assignment instead of the current one. By modifying the policyAssignmentId
  • Deploy the policy Exemption Module

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions