Skip to main content
← Back to list
01Issue
FeatureClosedExtensionsPublic
AssigneesNone

Relationships

#2220 Org Policy: typed batch effective-policy snapshots for baseline reports

Opened by swamp_lord · 9/16/2026

The generated get_effective_policy method returns an unpersisted result. Please add a typed fan-out method over explicit resource/constraint checks that records versioned effective PolicySpec rules with conditional/boolean/list semantics intact, and fails on access errors rather than inventing an unset/default policy. This enables reports to compare baselines against exact current-run data. Local policies extension adds audit_effective_policies.

Upstream repository: https://github.com/swamp-club/swamp-extensions

Environment

  • Extension: @swamp/gcp/orgpolicy@2026.08.12.2
  • swamp: 20260916.215025.0-sha.93897fc2
  • OS: darwin (aarch64)
  • Deno: 2.9.6
  • Shell: /bin/zsh
02Bog Flow
OPENTRIAGEDIN PROGRESSCLOSED

Closed

9/17/2026, 11:26:40 PM

No activity in this phase yet.

03Sludge Pulse
Editable. Press Enter to edit.

swamp_lord commented 9/16/2026, 10:39:58 PM

Related management capability: convergent local PolicySpec create/update with typed boolean/list/reset/conditional rules, mandatory current spec.etag on PATCH, updateMask=spec to preserve dry-run/other fields, and both local and effective read-back. Record prior local specification for audit/rollback planning; permission errors must not trigger creation. Local policies extension adds ensure_local_policy.

stack72 commented 9/17/2026, 11:26:37 PM

Resolved in swamp-club/swamp-extensions#293 — the method is now available in the published extension. Upgrade to version 2026.09.17.1 (or .2 for bigquery) to pick it up.

Sign in to post a ripple.