opa

opa copied to clipboard

Dependency Management

6

I'd like to kick off some discussion around adding explicit dependencies to Rego. The primary use case I have in mind is sharing code. At @Fugue we have a bunch...

jaspervdj-luminal

Improve compiler performance for incremental load scenarios

3

The current compiler implementation re-runs all stages on all modules each time the compiler is invoked. This is fine when policies are loaded in bulk, however, [when policies are loaded...

tsandall

Explain the `http_request_duration` metric in the docs

7

Currently we mention the `http_request_duration` histogram in the Prometheus endpoint but we don't explain that the buckets go from 1us to 1s: ``` http_request_duration_seconds_bucket{code="200",handler="v1/data",method="get",le="1e-06"} 0 //

tsandall

Currently unexpected errors returned by topdown#eval can be difficult to debug because the context (input data, bindings, etc.) are not included in the error message (to avoid leaking sensitive data.)...

tsandall

docs on creating bundles are incomplete

5

Hi, I noticed that there is no complete example in the docs on how to create a bundle including entrypoint and data. There is this one https://www.openpolicyagent.org/docs/latest/management-bundles/#bundle-build which uses the...

bluebrown

Bumps the go-opentelemetry-io group with 6 updates: | Package | From | To | | --- | --- | --- | | [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.46.1` | `0.51.0` | | [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go)...

dependabot[bot]

Arrays are not explained in the language description

2

## Short description In https://www.openpolicyagent.org/docs/v0.64.1/policy-language/#sets it says: > In addition to arrays and objects, Rego supports set values. But this is the first time arrays are mentioned in this document....

SpecLad

auth: Disable the Authorization header for ECR redirects.

1

### Why the changes in this PR are needed? I am attempting to address https://github.com/open-policy-agent/opa/issues/6580 ECR serves OCI blobs by redirecting to S3 using pre-signed URLs. Currently, OPA adds the...

gdlg

Docs support for other languages

7

## What is the underlying problem you're trying to solve? Making the documentation available in other languages will help expand the usage of OPA to developers from different nationalities. ##...

pedroignacio13

Support EKS Pod Identities for Signing S3 Bundle Requests

4

## What is the underlying problem you're trying to solve? Currently, OPA supports [AWS Signatures using IAM Roles for Service Accounts (IRSA) in EKS](https://www.openpolicyagent.org/docs/latest/configuration/#using-eks-iam-roles-for-service-account-web-identity-credentials) to sign and retrieve bundles. [EKS...

alghanmi