{"action":"created","comment":{"url":"https://api.github.com/repos/hashicorp/terraform-website/pulls/comments/233169505","pull_request_review_id":174521125,"id":233169505,"node_id":"MDI0OlB1bGxSZXF1ZXN0UmV2aWV3Q29tbWVudDIzMzE2OTUwNQ==","diff_hunk":"@@ -1,36 +1,63 @@\n ---\n layout: enterprise2\n-page_title: \"Sentinel - Terraform Enterprise\"\n+page_title: \"Managing Sentinel Policies - Sentinel - Terraform Enterprise\"\n sidebar_current: \"docs-enterprise2-sentinel-manage-policies\"\n ---\n \n-# Managing Policies\n+# Managing Sentinel Policies\n \n--> **API:** See the [Policies API](../api/policies.html).\n+-> **API:** See the [Policies API](../api/policies.html) and [Policy Sets API](../api/policy-sets.html).\n \n-Sentinel Policies are rules which are enforced on every workspace run to validate the terraform plan and corresponding resources are in compliance with company policies. Policies are made up of a sentinel policy file, a name, and an enforcement level. They are managed at an organization level and a user must be in the organization's owners team to create, edit or delete policies.\n+Sentinel Policies are rules which are enforced on every Terraform run to validate that the plan and corresponding resources are in compliance with company policies.\n \n-To view the policies navigate to the organization's settings page under \"Sentinel Policy\". From the \"Sentinel Policy\" section you can view, list, edit, create and delete the policies.\n+## Policies and Policy Sets\n \n-To create a new policy, navigate to \"Create Policy\". Sentinel is designed to enable policy as code. As such, it is recommended to use the Terraform Enterprise UI to manage policy only for demos and simple integrations. For complex integrations, it is [recommended to store Sentinel policies in version control](./integrate-vcs.html).\n+[teams]: ../users-teams-organizations/teams.html\n+[users]: ../users-teams-organizations/users.html\n+[workspaces]: ../workspaces/index.html\n \n-- **Policy Name**: The name of your policy is used in the UI and Sentinel output. Accepts alphanumeric characters, as well as `-` and `_`. Cannot be modified after creation.\n-- **Enforcement Mode**: This sets the level to which the policy is enforced when performing a run.\n-  - **hard-mandatory (cannot override)**: This policy is required on all terraform runs. It cannot be overridden by any users.\n-  - **soft-mandatory (can override)**: This policy is required. If a terraform plan fails to comply, it can be overridden by a member of the organization owners team.\n-  - **advisory (logging only)**: This policy will allow the run to continue to an apply in both pass and failures of the policy check.\n-- **Policy Code**: The [Terraform compatible sentinel](https://docs.hashicorp.com/sentinel/app/terraform/) policy which defines the rules for the terraform configurations, states and plans. Please note that custom imports are not available for use in Terraform Enterprise at this time.\n+**Policies** consist of a Sentinel policy file, a name, and an enforcement level.\n \n-Consider integrating with the Terraform Enterprise API in CI to test and upload policy files. In the future, Terraform Enterprise will integrate directly with VCS providers for the Sentinel workflow.\n+**Policy sets** are groups of policies that can be applied to [workspaces][]. A policy set can apply to designated workspaces, or to all workspaces in the organization.","path":"content/source/docs/enterprise/sentinel/manage-policies.html.md","position":34,"original_position":34,"commit_id":"970be06678d28d167de4248e164605188d5ded92","original_commit_id":"970be06678d28d167de4248e164605188d5ded92","user":{"login":"davidcelis","id":36873,"node_id":"MDQ6VXNlcjM2ODcz","avatar_url":"https://avatars3.githubusercontent.com/u/36873?v=4","gravatar_id":"","url":"https://api.github.com/users/davidcelis","html_url":"https://github.com/davidcelis","followers_url":"https://api.github.com/users/davidcelis/followers","following_url":"https://api.github.com/users/davidcelis/following{/other_user}","gists_url":"https://api.github.com/users/davidcelis/gists{/gist_id}","starred_url":"https://api.github.com/users/davidcelis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/davidcelis/subscriptions","organizations_url":"https://api.github.com/users/davidcelis/orgs","repos_url":"https://api.github.com/users/davidcelis/repos","events_url":"https://api.github.com/users/davidcelis/events{/privacy}","received_events_url":"https://api.github.com/users/davidcelis/received_events","type":"User","site_admin":false},"body":"I do kinda like the semantics of \"applying\" a policy set to workspaces a bit more than \"attaching\" a policy set to workspaces… But I'm a little worried about overloading the usage of the word \"apply\" when we already have that as a very important term in the world of Terraform. 🤔 Am I worrying for nothing, or should we maybe stick with attaching?","created_at":"2018-11-13T18:32:14Z","updated_at":"2018-11-13T18:32:15Z","html_url":"https://github.com/hashicorp/terraform-website/pull/549#discussion_r233169505","pull_request_url":"https://api.github.com/repos/hashicorp/terraform-website/pulls/549","author_association":"MEMBER","_links":{"self":{"href":"https://api.github.com/repos/hashicorp/terraform-website/pulls/comments/233169505"},"html":{"href":"https://github.com/hashicorp/terraform-website/pull/549#discussion_r233169505"},"pull_request":{"href":"https://api.github.com/repos/hashicorp/terraform-website/pulls/549"}}},"pull_request":{"url":"https://api.github.com/repos/hashicorp/terraform-website/pulls/549","id":229219609,"node_id":"MDExOlB1bGxSZXF1ZXN0MjI5MjE5NjA5","html_url":"https://github.com/hashicorp/terraform-website/pull/549","diff_url":"https://github.com/hashicorp/terraform-website/pull/549.diff","patch_url":"https://github.com/hashicorp/terraform-website/pull/549.patch","issue_url":"https://api.github.com/repos/hashicorp/terraform-website/issues/549","number":549,"state":"open","locked":false,"title":"Revise policy sets docs","user":{"login":"nfagerlund","id":484309,"node_id":"MDQ6VXNlcjQ4NDMwOQ==","avatar_url":"https://avatars3.githubusercontent.com/u/484309?v=4","gravatar_id":"","url":"https://api.github.com/users/nfagerlund","html_url":"https://github.com/nfagerlund","followers_url":"https://api.github.com/users/nfagerlund/followers","following_url":"https://api.github.com/users/nfagerlund/following{/other_user}","gists_url":"https://api.github.com/users/nfagerlund/gists{/gist_id}","starred_url":"https://api.github.com/users/nfagerlund/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nfagerlund/subscriptions","organizations_url":"https://api.github.com/users/nfagerlund/orgs","repos_url":"https://api.github.com/users/nfagerlund/repos","events_url":"https://api.github.com/users/nfagerlund/events{/privacy}","received_events_url":"https://api.github.com/users/nfagerlund/received_events","type":"User","site_admin":false},"body":"","created_at":"2018-11-08T01:07:31Z","updated_at":"2018-11-13T18:32:15Z","closed_at":null,"merged_at":null,"merge_commit_sha":"dfe90583346a45aa83b276be894a4fbdad32030c","assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/hashicorp/terraform-website/pulls/549/commits","review_comments_url":"https://api.github.com/repos/hashicorp/terraform-website/pulls/549/comments","review_comment_url":"https://api.github.com/repos/hashicorp/terraform-website/pulls/comments{/number}","comments_url":"https://api.github.com/repos/hashicorp/terraform-website/issues/549/comments","statuses_url":"https://api.github.com/repos/hashicorp/terraform-website/statuses/970be06678d28d167de4248e164605188d5ded92","head":{"label":"hashicorp:nov18_polsets","ref":"nov18_polsets","sha":"970be06678d28d167de4248e164605188d5ded92","user":{"login":"hashicorp","id":761456,"node_id":"MDEyOk9yZ2FuaXphdGlvbjc2MTQ1Ng==","avatar_url":"https://avatars2.githubusercontent.com/u/761456?v=4","gravatar_id":"","url":"https://api.github.com/users/hashicorp","html_url":"https://github.com/hashicorp","followers_url":"https://api.github.com/users/hashicorp/followers","following_url":"https://api.github.com/users/hashicorp/following{/other_user}","gists_url":"https://api.github.com/users/hashicorp/gists{/gist_id}","starred_url":"https://api.github.com/users/hashicorp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hashicorp/subscriptions","organizations_url":"https://api.github.com/users/hashicorp/orgs","repos_url":"https://api.github.com/users/hashicorp/repos","events_url":"https://api.github.com/users/hashicorp/events{/privacy}","received_events_url":"https://api.github.com/users/hashicorp/received_events","type":"Organization","site_admin":false},"repo":{"id":92349608,"node_id":"MDEwOlJlcG9zaXRvcnk5MjM0OTYwOA==","name":"terraform-website","full_name":"hashicorp/terraform-website","private":false,"owner":{"login":"hashicorp","id":761456,"node_id":"MDEyOk9yZ2FuaXphdGlvbjc2MTQ1Ng==","avatar_url":"https://avatars2.githubusercontent.com/u/761456?v=4","gravatar_id":"","url":"https://api.github.com/users/hashicorp","html_url":"https://github.com/hashicorp","followers_url":"https://api.github.com/users/hashicorp/followers","following_url":"https://api.github.com/users/hashicorp/following{/other_user}","gists_url":"https://api.github.com/users/hashicorp/gists{/gist_id}","starred_url":"https://api.github.com/users/hashicorp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hashicorp/subscriptions","organizations_url":"https://api.github.com/users/hashicorp/orgs","repos_url":"https://api.github.com/users/hashicorp/repos","events_url":"https://api.github.com/users/hashicorp/events{/privacy}","received_events_url":"https://api.github.com/users/hashicorp/received_events","type":"Organization","site_admin":false},"html_url":"https://github.com/hashicorp/terraform-website","description":"Prototype of Terraform website being assembled from multiple repositories","fork":false,"url":"https://api.github.com/repos/hashicorp/terraform-website","forks_url":"https://api.github.com/repos/hashicorp/terraform-website/forks","keys_url":"https://api.github.com/repos/hashicorp/terraform-website/keys{/key_id}","collaborators_url":"https://api.github.com/repos/hashicorp/terraform-website/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/hashicorp/terraform-website/teams","hooks_url":"https://api.github.com/repos/hashicorp/terraform-website/hooks","issue_events_url":"https://api.github.com/repos/hashicorp/terraform-website/issues/events{/number}","events_url":"https://api.github.com/repos/hashicorp/terraform-website/events","assignees_url":"https://api.github.com/repos/hashicorp/terraform-website/assignees{/user}","branches_url":"https://api.github.com/repos/hashicorp/terraform-website/branches{/branch}","tags_url":"https://api.github.com/repos/hashicorp/terraform-website/tags","blobs_url":"https://api.github.com/repos/hashicorp/terraform-website/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/hashicorp/terraform-website/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/hashicorp/terraform-website/git/refs{/sha}","trees_url":"https://api.github.com/repos/hashicorp/terraform-website/git/trees{/sha}","statuses_url":"https://api.github.com/repos/hashicorp/terraform-website/statuses/{sha}","languages_url":"https://api.github.com/repos/hashicorp/terraform-website/languages","stargazers_url":"https://api.github.com/repos/hashicorp/terraform-website/stargazers","contributors_url":"https://api.github.com/repos/hashicorp/terraform-website/contributors","subscribers_url":"https://api.github.com/repos/hashicorp/terraform-website/subscribers","subscription_url":"https://api.github.com/repos/hashicorp/terraform-website/subscription","commits_url":"https://api.github.com/repos/hashicorp/terraform-website/commits{/sha}","git_commits_url":"https://api.github.com/repos/hashicorp/terraform-website/git/commits{/sha}","comments_url":"https://api.github.com/repos/hashicorp/terraform-website/comments{/number}","issue_comment_url":"https://api.github.com/repos/hashicorp/terraform-website/issues/comments{/number}","contents_url":"https://api.github.com/repos/hashicorp/terraform-website/contents/{+path}","compare_url":"https://api.github.com/repos/hashicorp/terraform-website/compare/{base}...{head}","merges_url":"https://api.github.com/repos/hashicorp/terraform-website/merges","archive_url":"https://api.github.com/repos/hashicorp/terraform-website/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/hashicorp/terraform-website/downloads","issues_url":"https://api.github.com/repos/hashicorp/terraform-website/issues{/number}","pulls_url":"https://api.github.com/repos/hashicorp/terraform-website/pulls{/number}","milestones_url":"https://api.github.com/repos/hashicorp/terraform-website/milestones{/number}","notifications_url":"https://api.github.com/repos/hashicorp/terraform-website/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/hashicorp/terraform-website/labels{/name}","releases_url":"https://api.github.com/repos/hashicorp/terraform-website/releases{/id}","deployments_url":"https://api.github.com/repos/hashicorp/terraform-website/deployments","created_at":"2017-05-25T00:53:44Z","updated_at":"2018-11-13T13:54:08Z","pushed_at":"2018-11-13T13:54:08Z","git_url":"git://github.com/hashicorp/terraform-website.git","ssh_url":"git@github.com:hashicorp/terraform-website.git","clone_url":"https://github.com/hashicorp/terraform-website.git","svn_url":"https://github.com/hashicorp/terraform-website","homepage":null,"size":139594,"stargazers_count":45,"watchers_count":45,"language":"HTML","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":103,"mirror_url":null,"archived":false,"open_issues_count":34,"license":{"key":"other","name":"Other","spdx_id":"NOASSERTION","url":null,"node_id":"MDc6TGljZW5zZTA="},"forks":103,"open_issues":34,"watchers":45,"default_branch":"master"}},"base":{"label":"hashicorp:master","ref":"master","sha":"e9a4ab466504631a606d8c392ff1b2f6a2b77845","user":{"login":"hashicorp","id":761456,"node_id":"MDEyOk9yZ2FuaXphdGlvbjc2MTQ1Ng==","avatar_url":"https://avatars2.githubusercontent.com/u/761456?v=4","gravatar_id":"","url":"https://api.github.com/users/hashicorp","html_url":"https://github.com/hashicorp","followers_url":"https://api.github.com/users/hashicorp/followers","following_url":"https://api.github.com/users/hashicorp/following{/other_user}","gists_url":"https://api.github.com/users/hashicorp/gists{/gist_id}","starred_url":"https://api.github.com/users/hashicorp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hashicorp/subscriptions","organizations_url":"https://api.github.com/users/hashicorp/orgs","repos_url":"https://api.github.com/users/hashicorp/repos","events_url":"https://api.github.com/users/hashicorp/events{/privacy}","received_events_url":"https://api.github.com/users/hashicorp/received_events","type":"Organization","site_admin":false},"repo":{"id":92349608,"node_id":"MDEwOlJlcG9zaXRvcnk5MjM0OTYwOA==","name":"terraform-website","full_name":"hashicorp/terraform-website","private":false,"owner":{"login":"hashicorp","id":761456,"node_id":"MDEyOk9yZ2FuaXphdGlvbjc2MTQ1Ng==","avatar_url":"https://avatars2.githubusercontent.com/u/761456?v=4","gravatar_id":"","url":"https://api.github.com/users/hashicorp","html_url":"https://github.com/hashicorp","followers_url":"https://api.github.com/users/hashicorp/followers","following_url":"https://api.github.com/users/hashicorp/following{/other_user}","gists_url":"https://api.github.com/users/hashicorp/gists{/gist_id}","starred_url":"https://api.github.com/users/hashicorp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/hashicorp/subscriptions","organizations_url":"https://api.github.com/users/hashicorp/orgs","repos_url":"https://api.github.com/users/hashicorp/repos","events_url":"https://api.github.com/users/hashicorp/events{/privacy}","received_events_url":"https://api.github.com/users/hashicorp/received_events","type":"Organization","site_admin":false},"html_url":"https://github.com/hashicorp/terraform-website","description":"Prototype of Terraform website being assembled from multiple repositories","fork":false,"url":"https://api.github.com/repos/hashicorp/terraform-website","forks_url":"https://api.github.com/repos/hashicorp/terraform-website/forks","keys_url":"https://api.github.com/repos/hashicorp/terraform-website/keys{/key_id}","collaborators_url":"https://api.github.com/repos/hashicorp/terraform-website/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/hashicorp/terraform-website/teams","hooks_url":"https://api.github.com/repos/hashicorp/terraform-website/hooks","issue_events_url":"https://api.github.com/repos/hashicorp/terraform-website/issues/events{/number}","events_url":"https://api.github.com/repos/hashicorp/terraform-website/events","assignees_url":"https://api.github.com/repos/hashicorp/terraform-website/assignees{/user}","branches_url":"https://api.github.com/repos/hashicorp/terraform-website/branches{/branch}","tags_url":"https://api.github.com/repos/hashicorp/terraform-website/tags","blobs_url":"https://api.github.com/repos/hashicorp/terraform-website/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/hashicorp/terraform-website/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/hashicorp/terraform-website/git/refs{/sha}","trees_url":"https://api.github.com/repos/hashicorp/terraform-website/git/trees{/sha}","statuses_url":"https://api.github.com/repos/hashicorp/terraform-website/statuses/{sha}","languages_url":"https://api.github.com/repos/hashicorp/terraform-website/languages","stargazers_url":"https://api.github.com/repos/hashicorp/terraform-website/stargazers","contributors_url":"https://api.github.com/repos/hashicorp/terraform-website/contributors","subscribers_url":"https://api.github.com/repos/hashicorp/terraform-website/subscribers","subscription_url":"https://api.github.com/repos/hashicorp/terraform-website/subscription","commits_url":"https://api.github.com/repos/hashicorp/terraform-website/commits{/sha}","git_commits_url":"https://api.github.com/repos/hashicorp/terraform-website/git/commits{/sha}","comments_url":"https://api.github.com/repos/hashicorp/terraform-website/comments{/number}","issue_comment_url":"https://api.github.com/repos/hashicorp/terraform-website/issues/comments{/number}","contents_url":"https://api.github.com/repos/hashicorp/terraform-website/contents/{+path}","compare_url":"https://api.github.com/repos/hashicorp/terraform-website/compare/{base}...{head}","merges_url":"https://api.github.com/repos/hashicorp/terraform-website/merges","archive_url":"https://api.github.com/repos/hashicorp/terraform-website/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/hashicorp/terraform-website/downloads","issues_url":"https://api.github.com/repos/hashicorp/terraform-website/issues{/number}","pulls_url":"https://api.github.com/repos/hashicorp/terraform-website/pulls{/number}","milestones_url":"https://api.github.com/repos/hashicorp/terraform-website/milestones{/number}","notifications_url":"https://api.github.com/repos/hashicorp/terraform-website/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/hashicorp/terraform-website/labels{/name}","releases_url":"https://api.github.com/repos/hashicorp/terraform-website/releases{/id}","deployments_url":"https://api.github.com/repos/hashicorp/terraform-website/deployments","created_at":"2017-05-25T00:53:44Z","updated_at":"2018-11-13T13:54:08Z","pushed_at":"2018-11-13T13:54:08Z","git_url":"git://github.com/hashicorp/terraform-website.git","ssh_url":"git@github.com:hashicorp/terraform-website.git","clone_url":"https://github.com/hashicorp/terraform-website.git","svn_url":"https://github.com/hashicorp/terraform-website","homepage":null,"size":139594,"stargazers_count":45,"watchers_count":45,"language":"HTML","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":103,"mirror_url":null,"archived":false,"open_issues_count":34,"license":{"key":"other","name":"Other","spdx_id":"NOASSERTION","url":null,"node_id":"MDc6TGljZW5zZTA="},"forks":103,"open_issues":34,"watchers":45,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/hashicorp/terraform-website/pulls/549"},"html":{"href":"https://github.com/hashicorp/terraform-website/pull/549"},"issue":{"href":"https://api.github.com/repos/hashicorp/terraform-website/issues/549"},"comments":{"href":"https://api.github.com/repos/hashicorp/terraform-website/issues/549/comments"},"review_comments":{"href":"https://api.github.com/repos/hashicorp/terraform-website/pulls/549/comments"},"review_comment":{"href":"https://api.github.com/repos/hashicorp/terraform-website/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/hashicorp/terraform-website/pulls/549/commits"},"statuses":{"href":"https://api.github.com/repos/hashicorp/terraform-website/statuses/970be06678d28d167de4248e164605188d5ded92"}},"author_association":"COLLABORATOR"}}
{"actor":{"display_login":"davidcelis"}}