opa
opa copied to clipboard
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
# Expected Behavior Comparing two objects should just give a boolean result, for example: ```rego {"a": 1, "b": 2, "c": 3} == {"a": 1, "b": 2, "c": 3} ``` Should...
Currently, it is possible to use the `file://` scheme in `$ref` schema references to lookup schemas on the local file system for type-checking: ```rego package test # METADATA # schemas:...
The [Multiple Expressions](https://www.openpolicyagent.org/docs/latest/policy-language/#multiple-expressions) Rego example makes use of [Example Data](https://www.openpolicyagent.org/docs/latest/policy-language/#example-data) declared later in the [Policy Language](https://www.openpolicyagent.org/docs/latest/policy-language/) chapter. However, this is not explained in the text, which could be confusing to...
## Short description In /docs/content/policy-language.md, (https://www.openpolicyagent.org/docs/latest/policy-language/#sets) the cube described is a very weird one. One would assume that little bit of surreal (a 3x4x5 "cube") is done on purpose. Should...
Even when "unused", simply referencing a huge array will have a big impact on evaluation time. ``` package evaluator access := bar { data.slow_bundle.index.feeds bar := "baz" } ``` In...
## What is the underlying problem you're trying to solve? As a workaround for #5801, I have a large input document that I am modifying using `with` to parameterize incremental...
The docs on the [default keyword](https://www.openpolicyagent.org/docs/latest/policy-language/#default-keyword) describes the new default function feature like: > The value of a default function follows the same conditions as that of a default rule....
## Short description Wrong local names in partial evaluation ## Steps To Reproduce Using partial evaluation with this Rego Rules in a file rules.rego package data.play u[{"a":a}] { some {"a":a}...
In this case the error message should not include `__local0__` but rather `y`. ``` > show package repl p.x[y] { y := 7 } > p["foo"] { true } 1...
## Short description Fails to get aws metadata when IMDSv2 is required on the ECS cluster running on EC2 infrastructure This check does not work for EC2 based EC2 clusters...