Feature Request - PolicyGenerator to support complainceType under policies.name.manifest.path

[iamfaad]

Hi
which provides configuration options for individual manifests defined under policies, including:

complianceType (musthave, mustnothave, mustonlyhave)
evaluationInterval (compliant, noncompliant)
remediationAction (inform, enforce)

However, these same options are not available in PolicyGenerator. Can we have this added to PolicyGenerator?

apiVersion: ran.openshift.io/v1
kind: PolicyGenTemplate
metadata:
  name: nuz3-pgt                            
  namespace:  cip-nuz-ocp3-policies    
spec:
  bindingRules:
    cluster: nuz-ocp3
  remediationAction: enforce
  sourceFiles:
    # disable self provisioner
    - fileName: other/disable-self-provisioner.yaml
      complianceType: mustonlyhave
      policyName: "disable-selfprovisioner"
      metadata:
        annotations:
          ran.openshift.io/ztp-deploy-wave: 5
    # remove kubeadmin-user 
    - fileName: other/remove-kubeadmin.yaml
      complianceType: mustnothave
      policyName: "remove-kubeadmin"
      metadata:
        annotations:
          ran.openshift.io/ztp-deploy-wave: 6
    - fileName: other/htpasswd-oauth.yaml
      evaluationInterval:
        compliant: "never"
      policyName: "local-user"
      metadata:
        annotations:
          ran.openshift.io/ztp-deploy-wave: 16
    # adding user to oauth
    - fileName: other/oauthclient-console.yaml
      evaluationInterval:
        compliant: "never"
      policyName: "local-user"
      metadata:
        annotations:
          ran.openshift.io/ztp-deploy-wave: 16
      remediationAction: inform

[dhaiducek]

@iamfaad This should already be implemented:

policy-generator-plugin/docs/policygenerator-reference.yaml

Lines 250 to 252 in 0380c53

	# Optional. (See policyDefaults.evaluationInterval for description.)
	# Cannot be specified when policyDefaults.consolidateManifests is set to true.
	evaluationInterval: {}

If it's not working, please let us know!