Skip to content

Segregate feature flag control for Compliance frameworks and Pipeline configuration

What does this MR do?

This MR segregates the availability of Compliance Framework and Compliance Pipeline configuration feature, by controlling them by two separate feature flags.

This will help in rolling out Compliance Framework and Compliance Pipeline configuration features independently.

Feature Feature flag name
Compliance frameworks ff_custom_compliance_frameworks
Compliance Pipeline configuration ff_evaluate_group_level_compliance_pipeline

Policies are updated to use the respective FF name.

Mentions #287779 (comment 528314432)

Screenshots (strongly suggested)

Compliance Framework Create / Edit form based on enablement of ff_evaluate_group_level_compliance_pipeline feature flag:

Enabled Disabled
Screen_Shot_2021-03-15_at_1.11.09_PM Screen_Shot_2021-03-15_at_1.11.31_PM

Does this MR meet the acceptance criteria?

Conformity

Availability and Testing

Security

If this MR contains changes to processing or storing of credentials or tokens, authorization and authentication methods and other items described in the security review guidelines:

  • Label as security and @ mention @gitlab-com/gl-security/appsec
  • The MR includes necessary changes to maintain consistency between UI, API, email, or other methods
  • Security reports checked/validated by a reviewer from the AppSec team
Edited by Aishwarya Subramanian

Merge request reports