indicate which constraints don't match

[acpana]

This probably is a feature request in CF but stating it here since the motivation comes from using gator.

When using gator it would be useful to quickly indicate that a constraint did not match. This can help users instantly know that something is wrong with their yaml/ setup and not the execution or evaluation of their constraint's evaluating code.

Making this also available in gatekeeper may not be suited in environments where many constraints are present but for shift left scenarios more information like this could be useful.

[maxsmythe]

Dropping the "maybe": that's implicit in whether or not the issue gets taken up.

[acpana]

from offline conversations, we are considering enabling this with a flag for gator test for instance.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 14 days if no further activity occurs. Thank you for your contributions.