opa

opa copied to clipboard

Add a `crypto.x509.parse_and_verify_certificates_with_keys` builtin

13

## What is the underlying problem you're trying to solve? The current version of `crypto.x509.parse_and_verify_certificates` builtin does not provide a way to check against which key usage the certificate is...

IxDay

OPA Pulling OCI Bundle from AWS ECR

5

I am attempting to pull an OCI policy bundle from AWS' ECR service. When the request for the blob is made, - OPA: 0.61.0 - AWS' ECR service returns a...

vazquezf2000

When OPA builds a bundle, the Rego version (0.x or 1.0) should be included as a manifest attribute. When the version of the contained Rego is advertised by the bundle...

johanfylling

Add new built-in function to query for metadata at provided ref

3

Metadata annotations provides many benefits for separating a policy project's metadata from its policy logic. This separation however comes with a cost, as we'll need to duplicate parts of metadata...

anderseknert

Allow more options for opa test `--ignore`

12

## Short description We moved to work with the bundle option on our rego project and had to change the tests to support it, unfortunately, our coverage flow is now...

oren-zohar

Rego loop not terminating on first successful match

3

## Short description We have a rego policy that iterates over a list of values and checks for each value to match an accepted state. Even after finding a successful...

ashwinhb

Incremental definition of function output

4

## What is the underlying problem you're trying to solve? I have an OPA policy that applies a per-item policy to a large collection of input. What I would like...

matt-phylum

Add the ability to create decision labels within a policy

31

BLUF: We are looking to add the ability to add labels to a decision log from within policy, so that we can filter and audit those decisions to be reported...

david-hamilton-bah

This was reported as a side-effect in #6433 but this is actually the main issue, so I'll close that in favor if this one. We _really_ ought to look into...

anderseknert

OPA build optimizations do not inline functions as expected

6

## Short description I've labelled this as a bug report, but it's also a request for clarification about when and how OPA inlines policy functions. I'm using OPA v0.60.0, and...

crdueck