feat(chart): add execute policy

Signed-off-by: Sebastian Becker <[email protected]>
carbynestack · Nov 20, 2024 · 71436c8 · 71436c8
1 parent 465ff8f
commit 71436c8
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/charts/thymus/templates/access-control/default-policies.yaml b/charts/thymus/templates/access-control/default-policies.yaml
@@ -26,6 +26,7 @@ data:
     default tag.update := false
     default tag.delete := false
     default use := false
+    default execute := false
   owner-access.rego: |
     package carbynestack.def
 
@@ -78,3 +79,9 @@ data:
         programIds := split(input.tags[i].value, ",")
         programIds[_] == input.subject
     }
+  ephemeral-execute.rego: |
+    package carbynestack.def
+
+    import rego.v1
+
+    execute if input.playerCount >= 2