opa

opa copied to clipboard

default behaviour should be to throw away decision logs instead of running OOM if its unable to send the decision logs

3

After a discussion on Slack I realised that OPA would end up in a OOM, if its unable to push its decision logs to the control plane. https://openpolicyagent.slack.com/archives/CBR63TK2A/p1651663584624969. I haven't...

johanneslarsson

opa test should show readable errors when equality failed

5

given a test like this: ```rego test_canonify_cpu_m { canonify_cpu("1m") == 2 } ``` - the test output (without `--verbose`) does not tell me what the actual number was - the...

grosser

Security Disclosure document is out of date

11

## Short description The SECURITY.md document is not up to date with google [removing RSS](https://support.google.com/groups/thread/118690869/when-will-googlegroups-rss-feed-be-back-online?hl=en&msgid=118692237) and with [DWF dissolving](https://distributedweaknessfiling.org/). For PCI compliance I am looking to have automated notifications when...

adoliver

OCI: manage persistence directory

1

Currently, we're putting "stuff" in "$persistence_path}/oci" or "/tmp/oci" (OS-dependent, some temp dir); but we're never cleaning it up. 1. Figure out if it needs to be cleaned up; and how...

srenatus

annotations: allow URL pointer to JSON schema

4

Annotations may currently point to a JSON schema on disk, and requires this location to be provided by the tool, e.g. `opa eval`. It would be very handy if we...

anderseknert

race-detector: data race in tests

1

``` ok github.com/open-policy-agent/opa/runtime 0.546s ================== WARNING: DATA RACE Read at 0x00c000496030 by goroutine 47: github.com/open-policy-agent/opa/logging/test.(*Logger).append() /src/logging/test/test.go:94 +0x164 github.com/open-policy-agent/opa/logging/test.(*Logger).Debug() /src/logging/test/test.go:56 +0x64 github.com/open-policy-agent/opa/download.(*Downloader).loop() /src/download/download.go:223 +0x511 github.com/open-policy-agent/opa/download.(*Downloader).doStart.func1() /src/download/download.go:167 +0x58 Previous write at 0x00c000496030...

srenatus

Feature Request: Create builtin to construct complex JSON objects

3

Following on from https://github.com/open-policy-agent/opa/pull/2168 it would be wonderful if OPA had a reverse walk function to build up JSON objects from sets. This would allow OPA to better service introspection...

samgurtman-zz

Investigate performance improvement for CIDR match against long prefix array

11

# Expected/Desired Behavior Logarithmic increase in time w.r.t. length of prefix array when performing longest prefix match (LPM) of an IPv4 address against a list of arbitrary IPv4 prefixes. #...

nischalsheth

Custom parsing for globs_match: wildcarded hostname overlap use case

4

# Expected Behavior While writing a rule for preventing overlapping hostnames I reached for `regex.globs_match` in the hopes that the function would be able to parse strings that may contain...

marshallford

website: auto-generate builtin documentation from source (incl. examples)

1

With #4080 giving us named arguments, we can use that information to autogenerate docs for the function arguments, incl descriptions, on the website. This could look like the folllowing: a....

srenatus