GoogleCloudPlatform/config-validator

Converge target and exclude semantics with Gatekeeper match semantics

Closed this issue · 3 comments

morgante commented

Based on the conversation, we should move them to the top level:

match:
   target: ...
   exclude: ...
t12g commented

The config validator library now accepts both formats. TF validator has been updated. For Forseti, the upcoming 2.17 release should have this change as well.

We can consider removing the support for old format in Forseti 2.18. @joecheuk WDYT?

joecheuk commented

Does removing supports mean its gonna fail when consuming the old policies or its just gonna ignore the match field?