Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OPA v1 support #275

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

OPA v1 support #275

wants to merge 1 commit into from

Conversation

eshepelyuk
Copy link
Contributor

No description provided.

@open-policy-agent open-policy-agent locked as off-topic and limited conversation to collaborators Jan 23, 2025
@eshepelyuk eshepelyuk force-pushed the chore/opav1 branch 5 times, most recently from eb2ae6b to 15c6afc Compare January 23, 2025 12:23
@open-policy-agent open-policy-agent unlocked this conversation Jan 23, 2025
@eshepelyuk eshepelyuk changed the title Chore/opav1 OPA v1 support Jan 23, 2025
@eshepelyuk eshepelyuk marked this pull request as ready for review January 23, 2025 12:24
@eshepelyuk
Copy link
Contributor Author

eshepelyuk commented Jan 23, 2025

Hello @ashutosh-narkar

I've added a fix for one of the failing tests, but there's still one of the tests failing - test/e2e/custom_config.
Let me explain the issue with it.

The test uses following values.yaml to install helm chart:

opa:
  services:
    controller:
      url: 'https://www.openpolicyagent.org'
  bundles:
    quickstart:
      service: controller
      resource: /bundles/helm-kubernetes-quickstart
  default_decision: /helm_kubernetes_quickstart/main

The idea is to setup static bundle when installing OPA and then the test that bundle is added to OPA rules.
Looks like that bundle is not compatible with OPA v1.

You can check error logs, and they say that loading that bundle failed
https://github.com/open-policy-agent/kube-mgmt/actions/runs/12929127272/job/36057866984#step:13:183

Can you plz check this and fix the published bundle ?

* upgrade OPA to v1
* update authz policy to be v1 compatible
* fix E2E tests

Fixes: #272

Signed-off-by: Ashutosh Narkar <[email protected]>
Signed-off-by: Ievgenii Shepeliuk <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants