pulumi/changelog/pending
Justin Van Patten 7ebcc42455
Downgrade remediate policy violations to mandatory (#15618)
Policy violations should not have a remediate enforcement level. The
Policy SDK currently downgrades the level from remediate to mandatory
for resource policy violations, but isn't currently doing that for stack
policies. A change to the Policy SDK is in-progress to do that.

This change applies the same behavior to the engine. If a resource
policy still has a violation after running remediations and the level is
remediate, "downgrade" the level to mandatory. Similarly, if a stack
policy has a violation with a remediate level, downgrade it to
mandatory.

This avoids a panic when getting a policy violation from a stack policy
and the enforcement level is remediate.

Related: https://github.com/pulumi/pulumi-policy/pull/339

Fixes https://github.com/pulumi/pulumi-policy/issues/332
2024-03-07 15:10:36 +00:00
..
20240222--sdk-nodejs--properly-capture-nodejs-crypto-and-global-crypto-in-node-19.yaml Properly capture nodejs:crypto and global.crypto (#15492) 2024-03-07 13:38:48 +00:00
20240226--engine--fix-an-issue-where-snapshots-could-become-invalid-when-doing-a-targeted-up.yaml Make sure non-targeted resources are not updated (#15476) 2024-03-05 07:49:11 +00:00
20240227--sdkgen--support-for-non-overlay-components-in-codegen-for-pulumi-kubernetes-provider.yaml Support for non-overlay components in codegen for pulumi-kubernetes provider (#15490) 2024-03-04 19:37:54 +00:00
20240227--sdkgen-dotnet--codegen-fix-for-resources-without-constant-input-properties.yaml [dotnet] codegen fix for resources without constant input properties (#15488) 2024-03-02 06:01:31 +00:00
20240228--pkg--schema-newpluginloader-now-respects-pulumi_debug_providers-which-enables-pulumi-yaml-programs-to-work-correctly-with-this-feature.yaml Schema loader made to respect PULUMI_DEBUG_PROVIDERS (#15526) 2024-03-04 21:54:05 +00:00
20240229--sdk-nodejs--add-experimental-support-to-the-nodejs-sdk-for-the-new-transforms-system.yaml NodeJS transforms (#15532) 2024-03-07 08:52:34 +00:00
20240301--pkg-testing--make-programtest-use-a-temporary-pulumi_home-for-each-test.yaml set PULUMI_HOME in ProgramTests (#15568) 2024-03-04 09:06:56 +00:00
20240302--sdk-python--fix-determining-plugins-for-old-packages-in-the-python-language-host.yaml Python: Fix determining plugins for old packages (#15576) 2024-03-04 07:23:34 +00:00
20240304--cli-new--strip-credentials-and-query-strings-from-template-urls-saved-to-project.yaml [cli/new] Strip sensitive data from template URLs (#15586) 2024-03-04 23:09:42 +00:00
20240305--backend-service--make-decrypt-encrypt-network-calls-retryable-to-help-work-around-network-hiccups.yaml allow retries for encrypt/decrypt API calls (#15600) 2024-03-06 08:35:36 +00:00
20240305--cli--fix-a-panic-when-the-secrets-provider-is-missing-from-the-deployment-snapshot.yaml fix panic on deserializing deployment (#15599) 2024-03-07 09:31:57 +00:00
20240305--sdk-nodejs--adds-support-to-suppress-progress-and-suppress-outputs-parameters.yaml Support suppress-progress and suppress-outputs options (#15596) 2024-03-07 09:29:24 +00:00
20240305--sdk-python--add-support-for-asynchronous-invokes-via-a-new-invoke_async-function.yaml [sdk/python] Add an `invoke_async` function (#15602) 2024-03-06 00:32:39 +00:00
20240306--sdk-dotnet--update-dotnet-language-host-to-3-60-0.yaml Update dotnet language host to 3.60 (#15609) 2024-03-06 21:16:47 +00:00
20240307--engine--downgrade-remediate-policy-violations-to-mandatory.yaml Downgrade remediate policy violations to mandatory (#15618) 2024-03-07 15:10:36 +00:00