jdevega
59cacfdfab
OPA/Rego deployment gateway policies: 5 rules (valid-environment, require-approvals, no-self-approval, block-weekends, freeze-window), a deploy-gate combining them, JSON schemas, scenario-driven tests, Gitea Actions CI (verify + publish to generic registry), changesets versioning, Makefile and scripts.
50 lines
1.2 KiB
JSON
50 lines
1.2 KiB
JSON
{
|
|
"scenarios": {
|
|
"valid_production": {
|
|
"input": {
|
|
"deployment": {
|
|
"environment": "production",
|
|
"service": "payments-api",
|
|
"version": "1.2.3",
|
|
"requested_by": "alice",
|
|
"created_at": "2026-09-15T10:00:00Z"
|
|
},
|
|
"approvals": [
|
|
{"by": "bob", "at": "2026-09-15T09:00:00Z", "active": true}
|
|
]
|
|
},
|
|
"data": {
|
|
"config": {
|
|
"production": {"min_approvals": 2, "block_weekends": true}
|
|
}
|
|
},
|
|
"expect": {
|
|
"allow": true,
|
|
"violations": []
|
|
}
|
|
},
|
|
"unknown_environment": {
|
|
"input": {
|
|
"deployment": {
|
|
"environment": "production",
|
|
"service": "payments-api",
|
|
"version": "1.2.3",
|
|
"requested_by": "alice",
|
|
"created_at": "2026-09-15T10:00:00Z"
|
|
},
|
|
"approvals": [
|
|
{"by": "bob", "at": "2026-09-15T09:00:00Z", "active": true}
|
|
]
|
|
},
|
|
"data": {
|
|
"config": {
|
|
"staging": {"min_approvals": 1}
|
|
}
|
|
},
|
|
"expect": {
|
|
"allow": false,
|
|
"violations": ["unknown_environment"]
|
|
}
|
|
}
|
|
}
|
|
} |