使用 Homebrew Cask 安装 sentinel

项目链接

• 主页
• 软件包管理器页面

命令和别名

• sentinel

项目历史

HashiCorp announced and released Sentinel at HashiConf in September 2017 as its policy-as-code framework. The initial design combined a policy-oriented language, an embedded runtime, a development simulator, and a plugin SDK.

Later Terraform Enterprise work added policy sets and expanded integrations, making Sentinel a reusable governance mechanism rather than a collection of workspace-specific checks.

采用历史

Sentinel became the policy-enforcement layer across HashiCorp's enterprise product suite, including Terraform, Vault, Nomad, and Consul. Its adoption is tied especially closely to infrastructure-as-code governance and automated compliance workflows.

使用方式

Authors write policies in Sentinel's language, organize them with HCL or JSON configuration, and use the CLI simulator to apply and test them. In integrated products, policies commonly approve, warn about, or block infrastructure operations according to security, compliance, cost, or operational rules.

为什么软件包爱好者会关心

Sentinel is notable for bringing a purpose-built, embeddable policy language into the HashiCorp ecosystem. The standalone simulator lets policy authors format, test, and apply policies locally before enforcing them in a hosted or enterprise workflow.

时间线

• 2017: HashiCorp announced and released Sentinel at HashiConf.
• 2017: Vault Enterprise and Terraform Enterprise introduced Sentinel integrations.
• 2018: Terraform Enterprise added reusable Sentinel policy sets.

Related projects

• HashiCorp Terraform
• HashiCorp Vault
• HashiCorp Nomad
• HashiCorp Consul
• Open Policy Agent

来源

• https://developer.hashicorp.com/sentinel/docs/configuration
• https://developer.hashicorp.com/sentinel/docs/intro
• https://www.hashicorp.com/en/blog/announcing-policy-sets-in-terraform-enterprise
• https://www.hashicorp.com/en/blog/hashicorp-announcements-hashiconf-2017