Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add UI for observing outcome when deploying policies in "dry run" mode #959

Open
nscuro opened this issue Dec 11, 2023 · 3 comments
Open
Labels
component/api-server domain/vuln-policy enhancement New feature or request p3 Nice-to-have features size/XL Higher effort

Comments

@nscuro
Copy link
Member

nscuro commented Dec 11, 2023

As part of #957, we identified that it would be good to have a "dry run" mode for policies. This mode would evaluate policies, but not apply their associated action.

Initially, this functionality is implemented using application logs. However, long-term, we can't expect users to observe logs. We should have a UI integration that provides this information instead.

The granularity of the information being displayed is still subject for discussion. But generally, the following would be nice to have:

  • Number of affected projects
  • Number of affected components
  • Number of affected findings
    • Potentially with additional aggregates, as in "avg. findings affected per component / project"
@skhokhlov
Copy link

skhokhlov commented Dec 15, 2023

I'm thinking maybe DT shouldn't apply new bundle of policies automatically after pulling, but wait for review? I mean firstly apply them in dry-run mode and then wait for approve

@VinodAnandan
Copy link
Collaborator

It's a good idea, but keeping it as the default behaviour while still allowing overrides makes it useful for multiple scenarios. Some may prefer to maintain a strict review and approval process solely within Git, without using multiple systems (Git and DT) for policy approval.

@skhokhlov
Copy link

skhokhlov commented Dec 15, 2023 via email

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
component/api-server domain/vuln-policy enhancement New feature or request p3 Nice-to-have features size/XL Higher effort
Projects
None yet
Development

No branches or pull requests

3 participants