opa

opa copied to clipboard

VNG Cloud has adopted OPA

2

### Organization Name VNG Cloud ### Organization Website https://www.vngcloud.vn/en/home ### Organization Logo (optional) https://www.vngcloud.vn/documents/20126/906379/logo-vng-cloud-color.png ### How is your organization using OPA? [Identity and Access Management (IAM)](https://iam.vngcloud.vn/) provides administrators with fine-grained...

vinhph0906

http.send: force_cache doesn't seem to work when Date header missing from response

3

## Short description I have a case when need to obtain user information from Keycloak (token) during policy evaluation. I have created policy with http.send method as per OPA [documentation](https://www.openpolicyagent.org/docs/latest/oauth-oidc/#token-retrieval)...

bartandacc

Make error messages less ambiguous when rules are declared on same line

1

Rego allows rules to be declared on the same line: ```rego package test foo(x) {x == 2} bar {true} baz := 1 ``` The policy ```rego package test p(x) if...

johanfylling

Support opa-envoy linux/arm64 Docker Image

18

## What is the underlying problem you're trying to solve? I'm using opa-envoy, but it doesn't support linux/arm64 architecture. So I can't use this on Graviton 2 (AWS). ## Describe...

Nebu1eto

docs: Add Gloo Edge tutorial for the OPA-Envoy plugin

8

The OPA-Envoy plugin is integrated with Gloo Edge and a step-by-step tutorial is available [here](https://github.com/open-policy-agent/opa-envoy-plugin/tree/master/examples/gloo-edge). We should add this tutorial to the [Envoy](https://www.openpolicyagent.org/docs/edge/envoy-introduction/) section of the OPA docs. We could...

ashutosh-narkar

## Short description Ref. https://openpolicyagent.slack.com/archives/CBR63TK2A/p1658915694205819 When OPA is activating a delta bundle there is an issue with naming/id of modules when `compileModules` is run here: https://github.com/open-policy-agent/opa/blob/cbfdcba53aee3764d50f994b1bfbe7cbb84005c6/bundle/store.go#L770 There is a difference...

martinjoha

built-ins: Object support for GraphQL built-ins

3

## Planned API This PR will implement support for AST objects to be usable in place of strings for 3x of the GraphQL built-in functions, to improve the composability of...

philipaconrad

Allow not keyword in more locations

8

## Expected Behavior The `not` keyword should be allowed in most places where assignment of any type is allowed: ```rego a := not 1 in [2, 3, 4] b :=...

anderseknert

is_number does not correctly return false (also the other is_ type checking builtins)

3

## Short description ``` % opa eval 'is_number("foo")' {} ``` ## Steps To Reproduce ## Expected behavior Should return false according to docs and according to design. https://www.openpolicyagent.org/docs/latest/policy-reference/#builtin-types-is_number ## Additional...

ericjkao

OPA Status Log when Using Persisted Bundle (if bundling service is down)

7

If persistence is set to true in your OPA config, and the agent is using the persisted bundle when the bundling service is down, can the agent produce a log...

jjthom87