opa
opa copied to clipboard
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
### Why the changes in this PR are needed? Need to support exclusion of certain headers from `http.send` query cache key. ### What are the changes in this PR? *...
In our OPA/Styra setup, we already uses `system.log` to mask sensitive input, and enrich the decision-log e.g. by adding the decoded jwt to the input next to the encoded-jwt. ##...
There are currently a few ways to configure OPA so that decision logs exceeding some set threshold (in bytes or decisions per second) get discarded. While possibly useful in some...
Having recently looked into a deeper integration of the OPA test runner (via command line invocation) and the [OPA VS Code extension](https://marketplace.visualstudio.com/items?itemName=tsandall.opa), there are some hurdles that I think would...
## What is the underlying problem you're trying to solve? Microsoft azure is deprecating the aad pod identity, https://github.com/Azure/aad-pod-identity#-announcement. AAD Pod Identity has been replaced with [Azure Workload Identity](https://azure.github.io/azure-workload-identity) We...
## What is the underlying problem you're trying to solve? Currently, if we have several resources or queries we want to authorize via the HTTP REST API without incurring several...
## What is the underlying problem you're trying to solve? Our SCIM server returns `application/scim+json` as a `Content-Type` header. We need to enable `force_json_decode` to get the `raw_body` parsed into...
Having to create a storage object, and possibly a transaction, in order to just add some data for evaluation using the Go API is a chore, and not intuitive unless...
We are experiencing OPA pods logging errors during shutdown, even when it should be a graceful shutdown because a new pod is being deployed in an old pod's place. The...
## What is the underlying problem you're trying to solve? There are usecases where we need to cache responses but the requests have guaranteed unique headers (example: trace-id) that prevent...