Skip to content

FE: Add ability to create Compliance Framework from UI Policy Editor

Why are we doing this work

In the scope of Security Policy Scopes (&5510 - closed), we would like to allow users to save Policy YAML with policy scope in it. Based on designs and descriptions from the Epic, we would like to be able to specify policy scope based on:

  • assigned compliance frameworks,
  • list with included projects,
  • list with excluded projects.
policy_scope:
  compliance_frameworks:
  - id: 12345
  - id: 23456
  projects:
    including:
    - id: 12345
    - id: 23456
    excluding:
    - id: 34567
    - id: 45678

In the scope of this issue, we want to allow to create new Compliance Framework for the group from Policy UI editor.

Relevant links

Non-functional requirements

  • Documentation:
  • Feature flag: we should only show an updated editor and the button with ability to create new Compliance Framework when we have security_policies_policy_scope feature flag enabled,
  • Performance:
  • Testing:

Implementation plan

Verification steps

TBD

Edited by Alan (Maciej) Paruszewski