ratify icon indicating copy to clipboard operation
ratify copied to clipboard

Deprecate config policy provider

Open akashsinghal opened this issue 1 year ago • 3 comments

What would you like to be added?

Now that we have support for rego policy provider, we should deprecate config policy provider as it is very limited and not the encouraged way to manage policy in ratify moving forward. Policy language providers will be the future supported behavior including CEL support in the future.

I propose the following timeline:

  • 1.2: we announce plans to deprecate the config policy provider. In this release, we will switch default helm chart, config.json, and samples to use the rego policy provider.
  • 1.3 we remove all documentation for it. Add deprecate warning to headers of all files related to it
  • 1.4 we remove implementation completely, remove e2e tests. Remove extra JSON policy config paths we have in executor.go

Anything else you would like to add?

No response

Are you willing to submit PRs to contribute to this feature?

  • [ ] Yes, I am willing to implement it.

akashsinghal avatar Jan 04 '24 20:01 akashsinghal

We should announce deprecation/hide it/make it invisible/remove docs during 1.x releases and implement removal at the 2.0 release

luisdlp avatar Jan 09 '24 01:01 luisdlp

Create a comprehensive list of impacted resources/touchpoints we'll need to modify as part of the proposal.

luisdlp avatar Jan 09 '24 01:01 luisdlp

We have to continue supporting this until 2.0. Create 2.0 milestone and make deprecation announcement in current release.

susanshi avatar Mar 14 '24 00:03 susanshi