Ashutosh Narkar

icon indicating a website link https://www.linkedin.com/in/ashutoshnarkar

icon company Styra, Inc. icon location San Francisco,CA icon location Senior Software Engineer at Styra, Inc. | Lead @open-policy-agent

Results 273 comments of Ashutosh Narkar

fails to get aws metadata when IMDSv2 is required on ECS running on EC2 launch type

@krissell closing this for now. Once we have more information on this feel free to re-open. If you'd like to submit a fix that would be great too. Thanks!

fails to get aws metadata when IMDSv2 is required on ECS running on EC2 launch type

Great, thanks for following up on this! I'll re-open the issue. If you'd like to submit a fix please feel free to do so.

Don't allow schema lookups on disk through `$ref` schema references

> File-reads could be allowed through a capabilities attribute (but might be an unnecessary addition). Are you suggesting extending the `capabilities` support to specify file refs?

Don't allow schema lookups on disk through `$ref` schema references

Sounds good. I think it would be better if we specify the refs in the new field instead of a boolean attribute imo.

Don't allow schema lookups on disk through `$ref` schema references

> so by default, $refs with the file:// scheme should not be allowed @johan could this be part of strict type checking?

Docs on default functions should mention risk of undefined arguments

Can you please provide an example of this case?

[Project] Cloud Native Security White Paper Japanese translation - v2

I've opened a CNCF Service Desk ticket to get the doc converted and published. I'll keep y'all posted about updates from the CNCF. Thanks.

[Project] Cloud Native Security White Paper Japanese translation - v2

Not yet. I have asked for an update. Once I hear back, I'll post here.

auth: Disable the Authorization header for ECR redirects.

@gdlg the changes look fine. Have you tested this with an actual ECR-S3 scenario as described in https://github.com/open-policy-agent/opa/issues/6580?

Flag to fail OPA runtime if some of the bundle was not found

> In our use case, it's very crucial to load all bundles on OPA startup. Whenever error happens, we need to handle it the way we want, and not just...