-
Bug
-
Resolution: Done
-
Major
-
ACM 2.9.3
-
1
-
False
-
None
-
False
-
-
-
GRC Sprint 2024-06, GRC Sprint 2024-07
-
Moderate
-
No
In certain cases the PolicyGenerator will set the `spec.remediationAction` on the Policy.
In the case where the manifest is a ConfigurationPolicy that has the remediationAction set to "InformOnly" the generator will set `spec.remediationAction` to "InformOnly" which is not a valid value on a Policy.
Setting the remediationAction on the policy definition in the generator is ignored when the root `spec.remediationAction` is set.
This should output a Policy where `spec.remediationAction` is set to inform and the ConfigurationPolicy is set to InformOnly. Instead the output has InformOnly for both the Policy and the ConfigurationPolicy.
policies: - name: alert-clusterrole-unused remediationAction: inform manifests: - path: alert-clusterrole-unused.yml