https://pulumi.com logo
Title
l

little-cartoon-10569

05/06/2021, 1:23 AM
Can all organizations have policy packs published? I'm getting a 409 error...
[409] This organization does not support Policy as Code.
b

brainy-church-78120

05/06/2021, 1:41 AM
@little-cartoon-10569 are you on a team starter or team pro plan?
l

little-cartoon-10569

05/06/2021, 1:43 AM
Starter
b

brainy-church-78120

05/06/2021, 1:45 AM
currently, we only support policies on enterprise plans. we did recently discover a bug related to this in the UI as far as making that messaging more clear, that should be fixed soon. the table on this page https://www.pulumi.com/pricing/ has a breakdown of the features on our different plans
The breakdown of features lists "server-side enforcement" as being Enterprise, but there's no implication in the docs that that is related to "enforcing a policy pack across an organization".
The https://www.pulumi.com/docs/get-started/crossguard/enforcing-a-policy-pack/ page doesn't imply anywhere that the enforcement doesn't happen locally.
b

brainy-church-78120

05/06/2021, 1:51 AM
okay im sorry, i may be getting this wrong. i will have someone else follow up soon.
l

little-cartoon-10569

05/06/2021, 1:54 AM
It's not your fault. If it can't be done, then it can't be done. The docs should be updated though; I would have spent my morning differently if I'd known in advance.
w

white-balloon-205

05/06/2021, 1:59 AM
The open source
pulumi
CLI allows you to run policies locally using
--policy-pack
as described in https://www.pulumi.com/docs/get-started/crossguard/authoring-a-policy-pack/#running-locally. The server-side management of policy packs - publishing to app.pulumi.com for remote enforcement (pushing policy packs back down to clients that run deployments to an organization) described in https://www.pulumi.com/docs/get-started/crossguard/enforcing-a-policy-pack/#enforcing-a-policy-pack-across-an-organization is part of Pulumi Enterprise.
l

little-cartoon-10569

05/06/2021, 2:04 AM
Yes, @brainy-church-78120 explained that, I'm all sorted now. The docs don't cover that though, in the two ways I mentioned: "enforcing across an organization" doesn't mention that it happens server-side; and all the crossguard docs don't refer back to the pricing page, or mention that some services happen server-side / apply only to the Enterprise license.
w

white-balloon-205

05/06/2021, 2:07 AM
Yep - makes sense. We will update https://www.pulumi.com/docs/get-started/crossguard/enforcing-a-policy-pack/ to be more clear that this is an Enterprise feature. And we'll see if we can reword what's in the pricing page to be clearer.
👍 1
b

brainy-church-78120

05/06/2021, 2:10 AM
w

white-balloon-205

05/06/2021, 2:21 AM