This repository was archived by the owner on Aug 20, 2025. It is now read-only.
This repository was archived by the owner on Aug 20, 2025. It is now read-only.
Service Account Key Age policy has a bug #413
Description
Google SA keys have an expiration for year 10,000. The rego for https://github.com/GoogleCloudPlatform/policy-library/blob/master/policies/templates/gcp_iam_restrict_service_account_key_age_v1.yaml uses time.parse_rfc3339_ns method that does not work beyonf the year 2600ish. Please see the fix below: