jdevega
59cacfdfab
OPA/Rego deployment gateway policies: 5 rules (valid-environment, require-approvals, no-self-approval, block-weekends, freeze-window), a deploy-gate combining them, JSON schemas, scenario-driven tests, Gitea Actions CI (verify + publish to generic registry), changesets versioning, Makefile and scripts.
67 lines
1.7 KiB
JSON
67 lines
1.7 KiB
JSON
{
|
|
"scenarios": {
|
|
"outside_freeze": {
|
|
"input": {
|
|
"deployment": {
|
|
"environment": "production",
|
|
"service": "payments-api",
|
|
"version": "1.2.3",
|
|
"requested_by": "alice",
|
|
"created_at": "2026-09-15T10:00:00Z"
|
|
},
|
|
"approvals": []
|
|
},
|
|
"data": {
|
|
"freeze_windows": [
|
|
{"environment": "production", "start": "2026-12-20T00:00:00Z", "end": "2026-12-31T23:59:59Z"}
|
|
]
|
|
},
|
|
"expect": {
|
|
"allow": true,
|
|
"violations": []
|
|
}
|
|
},
|
|
"inside_freeze": {
|
|
"input": {
|
|
"deployment": {
|
|
"environment": "production",
|
|
"service": "payments-api",
|
|
"version": "1.2.3",
|
|
"requested_by": "alice",
|
|
"created_at": "2026-12-24T10:00:00Z"
|
|
},
|
|
"approvals": []
|
|
},
|
|
"data": {
|
|
"freeze_windows": [
|
|
{"environment": "production", "start": "2026-12-20T00:00:00Z", "end": "2026-12-31T23:59:59Z"}
|
|
]
|
|
},
|
|
"expect": {
|
|
"allow": false,
|
|
"violations": ["deploy_in_freeze"]
|
|
}
|
|
},
|
|
"window_for_other_environment": {
|
|
"input": {
|
|
"deployment": {
|
|
"environment": "development",
|
|
"service": "payments-api",
|
|
"version": "1.2.3",
|
|
"requested_by": "alice",
|
|
"created_at": "2026-12-24T10:00:00Z"
|
|
},
|
|
"approvals": []
|
|
},
|
|
"data": {
|
|
"freeze_windows": [
|
|
{"environment": "production", "start": "2026-12-20T00:00:00Z", "end": "2026-12-31T23:59:59Z"}
|
|
]
|
|
},
|
|
"expect": {
|
|
"allow": true,
|
|
"violations": []
|
|
}
|
|
}
|
|
}
|
|
} |