pulumi/changelog
Justin Van Patten 7ebcc42455
Downgrade remediate policy violations to mandatory (#15618)
Policy violations should not have a remediate enforcement level. The
Policy SDK currently downgrades the level from remediate to mandatory
for resource policy violations, but isn't currently doing that for stack
policies. A change to the Policy SDK is in-progress to do that.

This change applies the same behavior to the engine. If a resource
policy still has a violation after running remediations and the level is
remediate, "downgrade" the level to mandatory. Similarly, if a stack
policy has a violation with a remediate level, downgrade it to
mandatory.

This avoids a panic when getting a policy violation from a stack policy
and the enforcement level is remediate.

Related: https://github.com/pulumi/pulumi-policy/pull/339

Fixes https://github.com/pulumi/pulumi-policy/issues/332
2024-03-07 15:10:36 +00:00
..
pending Downgrade remediate policy violations to mandatory (#15618) 2024-03-07 15:10:36 +00:00
config.yaml Rename filestate to DIY (#15314) 2024-01-30 15:53:10 +00:00