opa

opa copied to clipboard

Debugger attach to file

1

Today, the debugger can **launch** an eval session that creates and evaluates a query, internally attaching to it through a debug tracer. As part of query result output, OPA can...

johanfylling

Trace JSON unmarshalling

1

`topdown.Event`, used in tracing, can't be unmarshalled from it's JSON representation. Unmarshalling would be useful for adding [attach-to-trace functionality](https://github.com/open-policy-agent/opa/issues/7437) to the debugger, and for external projects integrating with the SDK...

johanfylling

Unexpected behavior when rule name contains dash

2

Dashes are not allowed in (simple) rule names, and need to be quoted in refs. Users unaware of this will however not learn this from OPA, as this surprisingly parses...

anderseknert

Support Credential Provider Chain in providers.aws.sig_req

1

## What is the underlying problem you're trying to solve? We are trying to load policy data at evaluation time from an S3 bucket. This bucket is protected via IAMs...

mbamber

docs terraform output does not match actual and does not show CI

2

Hi, I'm new to OPA and I am not getting the desired outcome from it just yet. On the https://www.openpolicyagent.org/docs/latest/terraform/ page, When I run the opa exec command, I do...

qmg-lpicquet

Add helper to provide default values to rego.Runtime()

1

The way the runtime term is set up in the server and elsewhere makes use of internal packages, making it harder than it has to be for users of the...

anderseknert

Document peak memory usage impact of bundle updates

1

The performance documentation page has a section on [resource utilization](https://www.openpolicyagent.org/docs/latest/policy-performance/#resource-utilization) where memory consumption for storage is estimated to be ~20x the size of the raw JSON data. While this may...

anderseknert

Parameterized Rego test case filtering

1

Starting in OPA v1.2.0, Rego tests can be [parameterized](https://www.openpolicyagent.org/docs/edge/policy-testing/#parameterized-tests-and-data-driven-testing) through rule head ref variables, allowing a single test rule to define multiple test cases. Individual test rules can be filtered...

johanfylling

Referencing non-existing property of empty object passes type check, while non-empty object does not

3

As reported by @disaverio (thanks!) in the OPA Slack. **This is a type checker error** ```rego obj := {"foo": "bar"} obj.bar ``` ``` 1 error occurred: policy.rego:5: rego_type_error: undefined ref:...

anderseknert

Add test coverage for policies in docs

1

We have a growing number of tutorials and examples in the docs. While the unit and integration tests in OPA proper should be the primary means of testing, it would...

tsandall