Pull Requests | Issues | v2.2.3...v2.3.0
Features
#1789 #1808 Support policy commands and Git Repository root's Policy file
💡 If you use only Standard Registry, you don't have to care of Policy.
The following commands have been added.
- aqua policy init: Create a Policy file
- aqua policy allow: Allow a Policy file
- aqua policy deny: Deny a Policy file
And Git Repository root's Policy file has been introduced.
Please see the document too.
See also
Why is this feature needed?
To improve the user experience of non Standard Registries.
To set up Policy easily keeping the security.
To use non Standard Registries, you had to set the environment variable AQUA_POLICY_CONFIG.
But it is bothersome, especially in the team development because all members have to set the environment variable AQUA_POLICY_CONFIG.
Some tools such as direnv are useful to set environment variables, but it is undesirable to ask users to install additional tools for aqua.
By policy commands and Git Repository root's Policy file, you don't have to set the environment variable AQUA_POLICY_CONFIG.
Instead of setting AQUA_POLICY_CONFIG, you can allow Policy files by running aqua policy allow command according to the guide.
This change improves the user experience keeping the security.