-
Story
-
Resolution: Done
-
Undefined
-
None
-
2
-
False
-
-
False
-
-
-
-
GRC Sprint 2023-12, GRC Sprint 2023-14
-
No
Value Statement
As a policy user, I would like to have a ConfigurationPolicy that checks the status of a Kubernetes object but can't be enforced when the parent policy's remediationAction is set to enforce.
One idea is to set the ConfigurationPolicy's remediationAction to `InformOnly` (also accept `informonly`) and then when the template-sync controller syncs the ConfigurationPolicy, it would set the `remediationAction` to `inform` and ignore the parent policy's `remediationAction` in the `overrideRemediationAction` function.
Definition of Done for Engineering Story Owner (Checklist)
- ...
Development Complete
- The code is complete.
- Functionality is working.
- Any required downstream Docker file changes are made.
Tests Automated
- [ ] Unit/function tests have been automated and incorporated into the
build. - [ ] 100% automated unit/function test coverage for new or changed APIs.
Secure Design
- [ ] Security has been assessed and incorporated into your threat model.
Multidisciplinary Teams Readiness
- [ ] Create an informative documentation issue using the [Customer
Portal_doc_issue template](
https://github.com/stolostron/backlog/issues/new?assignees=&labels=squad%3Adoc&template=doc_issue.md&title=),
and ensure doc acceptance criteria is met. Link the development issue to
the doc issue. - [ ] Provide input to the QE team, and ensure QE acceptance criteria
(established between story owner and QE focal) are met.
Support Readiness
- [ ] The must-gather script has been updated.