enterprise-contract / enterprise-contract-controller Goto Github PK

In HACBS-2599, we came up with the idea to allow policy config authors to specify when a certain include/exclude line is effective. This is issue is about implementing the supporting CRD changes.

Change the schema of SourceConfig to allow items of the Exclude and Include lists to be either a string (as it is today), or an an object (new requirement).

The object should contain the following attributes:

Name           string (json "name")
EffectiveOn    string (json "effectiveOn")
EffectiveUntil string (json "effectiveUntil")

Both EffectiveOn and EffectiveUntil should conform to RFC3339, e.g. 2022-11-18T00:00:00Z. If it's possible to enforce this on the CRD side, great, but it's not a requirement. Be sure to document the expected format regardless.

For inspiration, this is a similar approach to the one taken in Tekton's ParamType.

Recently, we have come across a couple of situations where folks were using a much older version of the controller.

Part of the problem is that dependabot will not submit updates to pseudo versions, see dependabot/dependabot-core#2028.

Let's consider creating versioned releases for the controller so dependents can more easily track updates.