Skip to content

Update sentinel override docs #1211

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 10 commits into
base: main
Choose a base branch
from
Open

Update sentinel override docs #1211

Changes from all commits
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
726e3a0
Clarify Sentinel override behavior for hard-mandatory policies
andrewassaf7 Oct 29, 2025
38a5f98
Fix formatting of note regarding policy set overrides in enforce.mdx
andrewassaf7 Oct 30, 2025
9a8e1b0
Fix punctuation in note about policy set overrides in enforce.mdx
andrewassaf7 Oct 30, 2025
c5d1778
Merge branch 'main' into update-sentinel-override-docs
andrewassaf7 Oct 30, 2025
a895564
Clarify note on policy set overrides in enforce.mdx
andrewassaf7 Oct 30, 2025
66737e0
Fix formatting of note regarding hard-mandatory policies in enforce.mdx
andrewassaf7 Oct 30, 2025
4e8dad7
Merge branch 'main' into update-sentinel-override-docs
andrewassaf7 Oct 30, 2025
43675f8
Merge branch 'main' into update-sentinel-override-docs
andrewassaf7 Nov 10, 2025
fdf31cf
Add clarification on policy set overrides in Sentinel documentation
andrewassaf7 Nov 10, 2025
2426d61
Remove unnecessary blank line in policy enforcement section of docume…
andrewassaf7 Nov 10, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions ...nterprise/1.0.x/docs/enterprise/policy-enforcement/manage-policy-sets/index.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -65,6 +65,8 @@ Sentinel provides three policy enforcement levels:
- **soft mandatory:** Failed policies stop the run, but any user with [Manage Policy Overrides permission](/terraform/enterprise/users-teams-organizations/permissions#manage-policy-overrides) can override these failures and allow the run to complete.
- **hard mandatory:** Failed policies stop the run. Terraform does not apply runs with failed **hard mandatory** policies until a user fixes the issue that caused the failure.

~> **Tip:** If the policy set option “This policy set can be overridden in the event of mandatory failures” is enabled, users with the appropriate permissions (such as admins or team owners) can override any failed policy checks in that set, including those marked as `hard-mandatory`. This override setting takes precedence over the individual policy’s enforcement level.

### OPA

OPA provides two policy enforcement levels:
Expand Down
Loading