Torin Sandall
Torin Sandall
In some cases, the typical approaches for getting LDAP data into OPA do not work (e.g., replication may not scale and authenticating proxies may not have enough knowledge to gather...
Decision log events should include all of the information necessary to re-execute policy evaluation. Today if policies depend on time.now_ns() or other (custom) non-deterministic built-in functions, it is not easy...
Negated expressions can be produce surprising results if they contain nested terms that require rewriting. For example, the following query will be undefined if `input.x` is undefined: ```rego not f(input.x)...
As a user of OPA in a large organization that delegates policy authoring to different groups, I would like to be able to validate that policies packaged into bundles conform...
Currently, rule index lookups only support static expressions of the form ` = ` where the `` typically refers to an input value. In many cases, it would be advantageous...
The `opa bench` command was recently improved to include an e2e mode that runs the OPA HTTP server and executes queries over localhost. This is nice for obtaining benchmark results...
Today `opa bench` measures the performance of the inner-most evaluation call. This is useful because it provides an upper-bound on performance for a particular policy by ignoring things like server...
The MISCELLANEOUS top-level section in the docs navigation has grown organically over time. It feels like it's time to reorganize the content under MISCELLANEOUS that it's easier for people to...
With the schema support expanding on OPA/Rego to include annotations on rules, it would be useful to include a docs page on annotations. Perhaps it could exist on the existing...
Hello! First of all, thank you very much for maintaining this project! I'm hoping that someone can provide a bit of guidance. I apologize in advance for not having a...