fix: unlock Community deploy policy hard-blocking (#1643)

Remove the leftover paid-only blockingEnabled switch so enabled
block-on-deploy policies enforce on every tier, matching the
documented every-tier security surface. Existing Community policies
begin blocking immediately with no migration.
This commit is contained in:
Anso
2026-07-16 15:24:05 -04:00
committed by GitHub
parent b2576ede72
commit b91025dc8b
6 changed files with 137 additions and 34 deletions
+1 -2
View File
@@ -184,8 +184,7 @@ export class SchedulerService {
* and the offending images, then throw so the caller records the outcome:
* the auto-update loop catches per stack and continues the rest of the run,
* while a single-stack auto-start surfaces as a task failure. The gate
* fails open when Trivy is missing and is evaluation-only when the node's
* local tier is unpaid.
* fails open when Trivy is missing.
*/
private async enforceSchedulerPolicyGate(
stackName: string,