Anders Eknert

Results 206 comments of Anders Eknert

Thanks! You don't seem to have the `object` attribute under `input.request` .. but rather the `spec` is placed right under it.

Looking closer, there isn't even a `request` object in your input. You'd need to add both that and `object` if you want to mimic an [AdmissionReview request](https://kubernetes.io/docs/reference/access-authn-authz/extensible-admission-controllers/#request).

There is no `operation` in the input of your request.

Your policy is right, but your data isn't. The `operation` attribute needs to be under `input.request`, not `input.request.object`. Though in this latest version of your data you seem to also...

Yes, the policy was correct but your input data wasn't. I guess you can close the issue now :)

Not sure how you come to that conclusion after having verified the policy with real input data. It seems more likely that something is missing in your admission controller webhook...

Have you been following the steps outlined in the tutorial [here](https://www.openpolicyagent.org/docs/latest/kubernetes-primer/)?

Should work with Java 8. Looks like you are skipping the step before that? `mvn install:install-file -Dfile=target/voter-1.0-SNAPSHOT.jar -DpomFile=pom.xml` The jar isn't published to Maven Central, so you'll need to build...

Sure you can! The `input` object provided to OPA is built [here](https://github.com/open-policy-agent/contrib/blob/main/spring_authz/src/main/java/org/openpolicyagent/voter/OPAVoter.java#L50), so you could modify that to include whatever you need. See the documentation on [external data](https://www.openpolicyagent.org/docs/latest/external-data/) for how...

Anything left unanswered here or are we good to close this @ameerhu?