jdevega
59cacfdfab
OPA/Rego deployment gateway policies: 5 rules (valid-environment, require-approvals, no-self-approval, block-weekends, freeze-window), a deploy-gate combining them, JSON schemas, scenario-driven tests, Gitea Actions CI (verify + publish to generic registry), changesets versioning, Makefile and scripts.
107 lines
2.4 KiB
JSON
107 lines
2.4 KiB
JSON
{
|
|
"scenarios": {
|
|
"weekday_ok": {
|
|
"input": {
|
|
"deployment": {
|
|
"environment": "production",
|
|
"service": "payments-api",
|
|
"version": "1.2.3",
|
|
"requested_by": "alice",
|
|
"created_at": "2026-09-15T10:00:00Z"
|
|
},
|
|
"approvals": []
|
|
},
|
|
"data": {
|
|
"config": {
|
|
"production": {"block_weekends": true}
|
|
}
|
|
},
|
|
"expect": {
|
|
"allow": true,
|
|
"violations": []
|
|
}
|
|
},
|
|
"saturday_blocked": {
|
|
"input": {
|
|
"deployment": {
|
|
"environment": "production",
|
|
"service": "payments-api",
|
|
"version": "1.2.3",
|
|
"requested_by": "alice",
|
|
"created_at": "2026-09-12T10:00:00Z"
|
|
},
|
|
"approvals": []
|
|
},
|
|
"data": {
|
|
"config": {
|
|
"production": {"block_weekends": true}
|
|
}
|
|
},
|
|
"expect": {
|
|
"allow": false,
|
|
"violations": ["weekend_deploy"]
|
|
}
|
|
},
|
|
"sunday_blocked": {
|
|
"input": {
|
|
"deployment": {
|
|
"environment": "production",
|
|
"service": "payments-api",
|
|
"version": "1.2.3",
|
|
"requested_by": "alice",
|
|
"created_at": "2026-09-13T10:00:00Z"
|
|
},
|
|
"approvals": []
|
|
},
|
|
"data": {
|
|
"config": {
|
|
"production": {"block_weekends": true}
|
|
}
|
|
},
|
|
"expect": {
|
|
"allow": false,
|
|
"violations": ["weekend_deploy"]
|
|
}
|
|
},
|
|
"weekend_not_blocked_when_disabled": {
|
|
"input": {
|
|
"deployment": {
|
|
"environment": "development",
|
|
"service": "payments-api",
|
|
"version": "1.2.3",
|
|
"requested_by": "alice",
|
|
"created_at": "2026-09-12T10:00:00Z"
|
|
},
|
|
"approvals": []
|
|
},
|
|
"data": {
|
|
"config": {
|
|
"development": {"block_weekends": false}
|
|
}
|
|
},
|
|
"expect": {
|
|
"allow": true,
|
|
"violations": []
|
|
}
|
|
},
|
|
"weekend_ignored_when_config_missing": {
|
|
"input": {
|
|
"deployment": {
|
|
"environment": "production",
|
|
"service": "payments-api",
|
|
"version": "1.2.3",
|
|
"requested_by": "alice",
|
|
"created_at": "2026-09-12T10:00:00Z"
|
|
},
|
|
"approvals": []
|
|
},
|
|
"data": {
|
|
"config": {}
|
|
},
|
|
"expect": {
|
|
"allow": true,
|
|
"violations": []
|
|
}
|
|
}
|
|
}
|
|
} |