opa
opa copied to clipboard
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
## Short description When running OPA with the distributed tracing option enabled, we get the following error when the server is stopped. ``` Failed to shutdown `OpenTelemetry` trace exporter gracefully....
executing make or make image will report an error ![image](https://user-images.githubusercontent.com/18587688/209554007-b092fa6d-e487-4866-8403-9f0bd839b2b2.png) DOCKER_UID=501 DOCKER_GID=20 /Library/Developer/CommandLineTools/usr/bin/make ci-go-ci-build-linux ci-go-ci-build-linux-static WARNING: The requested image's platform (linux/amd64) does not match the detected host platform (linux/arm64/v8) and...
The following module should produce a `rego_parse_error: unexpected every keyword` error: ```rego package example import rego.v1 every := "foo" ``` but it doesn't.
**History** There are two types of yaml libs used in the opa before v0.56.0: ghodss/yaml, gopkg.in/yaml. This pr [6195](https://github.com/open-policy-agent/opa/pull/6195) in v0.56.0 replaces gopkg.in/yaml with sigs.k8s.io/yaml, but gopkg.in/yaml is not replaced....
It would be a nice touch if the server printed an informative message on startup when unknown config options was encountered. These could come from either typos or mistaking some...
## What is the underlying problem you're trying to solve? The OPA HTTP server currently caches only the most recent 100 queries. This works great for many small workloads, but...
## Short description json.match_schema() does not work reliable with array input and schema ## Steps To Reproduce I have created a small example: https://github.com/mscudlik/opa-json-match-schema ## Expected behavior In my example,...
## What is the underlying problem you're trying to solve? I could not find any proper documentation that lists all metrics emitted by OPA or the envoy plugin today. Although...
### Why the changes in this PR are needed? In the envoy primer doc there are 2 different field names for the optional `status_code` to be sent when the request...
## Short description With opa 0.64.1, the metadata is not being processed per the spec; so either opa is wrong or the spec is wrong on this. Regarding metadata annotations...