Makefile

include .env
.PHONY: help fmt test styra-opa-agent styra-get-policies styra-upload-data data effective_security_level org_chart_data repl role_data test-agent-main
OPA_HOST = localhost:8181

help: ## Print Help
	@grep -Eh '^[a-zA-Z_-]+:.*?## .*$$' $(MAKEFILE_LIST) | awk 'BEGIN {FS = ":.*?## "}; {printf "\033[36m%-30s\033[0m %s\n", $$1, $$2}'

fmt: ## opa format
	@opa fmt -w *.rego

test: ## opa test
	opa test . -v

################################################################################
# local server agent
################################################################################
# To get opa-conf.yaml, go to the styra DAS admin console and select the
# system you want to register. Details are under the settings -> Install.
styra-opa-agent: ## start opa server (requires styra opa-conf.yaml)
	opa run --server --config-file=opa-conf.yaml

styra-upload-data: ## upload data.json to Styra DAS datasource called "dataset"
ifndef STYRA_SYSTEM_URL
$(error STYRA_SYSTEM_URL is unset in .env file)
endif
ifndef STYRA_BEARER_TOKEN
$(error STYRA_BEARER_TOKEN is unset in .env file)
endif
# note that the free styra only allows a single dataset, so we can't make additional ones
	jq .dataset data.json > .dataset.json
	curl -X PUT -H 'Content-Type: application/json' -H 'Authorization: Bearer $(STYRA_BEARER_TOKEN)' '$(STYRA_SYSTEM_URL)/dataset' -d '@.dataset.json'



styra-get-policies: ## get policies from local server
	@curl ${OPA_HOST}/v1/policies

test-agent-main: ## run main query on local agent
# valid branches are 001 through 006
# valid names are "sam", "bob", and "rob"
	@curl -w "@curl-format.txt" --location --request POST 'http://localhost:8181/v1/data/rules/main' \
	--header 'Content-Type: application/json' \
	--data-raw '{"input": { "user": { "name": "rob", "current_branch": "001" }, "securable_object":"CM_ENTRY"}}'
################################################################################
# Command-line evals
################################################################################
data: ## show all base and virtual data
	@opa eval --bundle . --input input.json --data data.json --format pretty 'data'

effective_security_level: ## print effective security level based on input.json and data.json
	@opa eval --bundle . --input input.json --data data.json --format pretty 'data.rules.effective_security_level'

org_chart_data: ## dump the org chart
	@opa eval --bundle . --data data.json --format pretty 'data.dataset.org_chart_data'

role_data: ## dump the role tree
	@opa eval --bundle . --data data.json --format pretty 'data.dataset.role_data'

repl: ## start a repl using data.json and input.json
	@opa run . repl.input:input.json