Hi
Is there a specification of the policy language anywhere? over and above the documentation at
Thanks
blee
Hi @blee, welcome to the community and to OpenZiti!
At this time there's no "language" associated with policies. There are a fixed set of policies one can create. There are "edge router policies" (identities -- routers), "service policies" (identities -- services) and "service edge router policies"(services -- routers). They allow the operator to associate identities/services/routers.
There's no expressive evaluation done or complex logic involved. It's mapping either attributes (denoted with #) or direct references (denoted with @) to be mapped together.
Is there a specific question that you were wondering about other than that we might help with?
Yes, I was wondering if its possible to extend the policy capabilies - e.g. by introducing new context/posture attributes ?
I am sure it's possible. @andrew.martinez probably would be the one to offer other thoughts.
@blee do you have any specific types of requests or thoughts? What kind of thing were you looking to introduce?
The posture and policy system is pretty static at the moment.
We discussed briefly allowing custom posture checks (including requesting data from SDKs and replying from SDKs). However, we never undertook it.
We have never discussed it for policies.