Skip to content

Commit

Permalink
docs: add dx related story/example
Browse files Browse the repository at this point in the history
Signed-off-by: Fabrizio Sestito <[email protected]>
  • Loading branch information
fabriziosestito committed Jun 18, 2024
1 parent 1bb734d commit 1ec3245
Showing 1 changed file with 6 additions and 0 deletions.
6 changes: 6 additions & 0 deletions rfc/0020-policy-group.md
Original file line number Diff line number Diff line change
Expand Up @@ -25,6 +25,7 @@ and enables the creation of custom policies using a DSL-like configuration.
[examples]: #examples

- As a user, I want to create a policy that is composed of other policies and is evaluated using a boolean expression.
- As a user, I want to develop and test a policy group with the help of kwctl.

# Detailed design

Expand Down Expand Up @@ -275,6 +276,11 @@ Also, we could consider creating a [custom package](https://rhai.rs/book/rust/pa
The policy server will support [raw policy](https://docs.kubewarden.io/tutorials/writing-policies/wasi/raw-policies) groups out of the box, since the group evaluation logic is implemented in the `EvaluationEnvironment`.
It will be possible to define a policy group with raw policies only, and evaluate the expression by calling the `validate_raw/<group name>` endpoint.

## Development

The `kwctl` tool will be extended to support the policy groups, to allow users to develop and test policy groups locally.
For this reason, it might be necessary to move the `EvaluationEnvironment` to the `policy-evaluator` crate and to refactor `kwctl` accordingly.

## Preliminary benchmark

The following results are based on the [Kubewarden k6 load test](https://github.com/kubewarden/load-testing/tree/k6) using the [psp-apparmor policy](https://github.com/kubewarden/apparmor-psp-policy)
Expand Down

0 comments on commit 1ec3245

Please sign in to comment.