I have written some OPA policies and grouped them into policy set. Now, I have a use case where I need to apply these policy sets to all existing and future workspaces within the organization. When I do global = true everything works fine. But I need a mechanism to exclude few workspace/projects. Terraform doesn’t natively support exclusion of projects but they do support exclusion of workspace. But When I am automating workspace exclusion (using "workspace_ids = [for ws in local.workspaces : ws.id if !contains(var.excluded_s3_workspace, ws.id)] ") it’s not applying to future workspaces. Does anyone faced this issue? Do you have any recommendation?
