Ashutosh Narkar
b88c09e9e9
Prepare v0.67.1 release
...
Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com >
v0.67.1
2024-08-05 09:30:16 -07:00
Philip Conrad
11e91b0015
util+server: Fix bug around chunked request handling. ( #6906 )
...
This commit fixes a request handling bug introduced in #6868 , which
caused OPA to treat all incoming chunked requests as if they had
zero-length request bodies.
The fix detects cases where the request body size is unknown in the
DecodingLimits handler, and propagates a request context key down to
the `util.ReadMaybeCompressedBody` function, allowing it to correctly
select between using the original `io.ReadAll` style for chunked
requests, or the newer preallocated buffers approach (for requests of
known size).
This change has a small, but barely visible performance impact for large
requests (<5% increase in GC pauses for a 1GB request JSON blob), and
minimal, if any, effect on RPS under load.
Fixes : #6904
Signed-off-by: Philip Conrad <philip@chariot-chaser.net >
(cherry picked from commit ee9ab0bf75 )
2024-08-05 09:30:16 -07:00
Ashutosh Narkar
b62ae6bfed
Prepare v0.67.0 release
...
Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com >
v0.67.0
2024-07-25 14:34:02 -07:00
dependabot[bot]
bec8e1a43e
build(deps): bump github/codeql-action from 3.25.13 to 3.25.14 ( #6888 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.25.13 to 3.25.14.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/2d790406f505036ef40ecba973cc774a50395aac...5cf07d8b700b67e235fbb65cbc84f69c0cf10464 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-25 17:42:05 +02:00
Aaron Campbell
d48fdd99ac
server: Add missing handling for explain=fails to the REST API.
...
Signed-off-by: Aaron Campbell <62760750+acamatcisco@users.noreply.github.com >
2024-07-23 15:36:44 -07:00
Ashutosh Narkar
959f9e54b4
docs: Add an example of a manifest with attribute
...
Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com >
2024-07-23 13:31:53 -07:00
Ashutosh Narkar
a793f27d1f
repl: Add support for correctly loading bundle modules
...
This change updates the repl so that the modules in the
provided bundle are parsed based on the `rego_version` attribute
in the bundle manifest. Currently that is ignored which leads
to parsing failures.
Fixes : #6872
Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com >
2024-07-23 13:31:53 -07:00
Philip Conrad
c5706eef7c
server+util: Limit max request sizes, prealloc request buffers ( #6868 )
...
This commit introduces a few major changes:
- (Breaking change) Limits now exist for maximum request body sizes.
- Buffers are preallocated for reading request bodies.
- Buffers are preallocated for decompressing request bodies.
- Gzip decoder instances are reused in a `sync.Pool` across requests.
The effect on garbage collection is dramatically fewer GC pauses, giving
a roughly 9% RPS improvement in load tests with gzipped request bodies.
For larger request sizes, the number of GC pauses is dramatically
reduced, although the peak pause time may increase by a few percent.
Implementation notes:
- The DecodingLimits handler enforces the max request body size both
through a Content-Length check, and a MaxBytesReader wrapper around
the payload.
- The DecodingLimits handler passes the gzip payload size limit down
using a context key.
Signed-off-by: Philip Conrad <philipaconrad@gmail.com >
2024-07-22 13:15:08 -04:00
dependabot[bot]
0ca35e294f
build(deps): bump docker/setup-buildx-action from 3.4.0 to 3.5.0 ( #6880 )
...
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action ) from 3.4.0 to 3.5.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases )
- [Commits](https://github.com/docker/setup-buildx-action/compare/4fd812986e6c8c2a69e18311145f9371337f27d4...aa33708b10e362ff993539393ff100fa93ed6a27 )
---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-22 15:11:58 +02:00
dependabot[bot]
f9ccb6658a
build(deps): bump github/codeql-action from 3.25.12 to 3.25.13 ( #6881 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.25.12 to 3.25.13.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/4fa2a7953630fd2f3fb380f21be14ede0169dd4f...2d790406f505036ef40ecba973cc774a50395aac )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-22 15:01:42 +02:00
dependabot[bot]
0db1f8f656
build(deps): bump docker/setup-qemu-action from 3.1.0 to 3.2.0 ( #6882 )
...
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action ) from 3.1.0 to 3.2.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases )
- [Commits](https://github.com/docker/setup-qemu-action/compare/5927c834f5b4fdf503fca6f4c7eccda82949e1ee...49b3bc8e6bdd4a60e6116a5414239cba5943d3cf )
---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-22 14:15:09 +02:00
cli-docs-updater
ac3ddf9b47
docs: Update generated CLI docs
2024-07-21 18:24:34 +00:00
Tyler Schade
5226cf3137
add ability for opa inspect to inspect a single file outside of any bundle ( #6873 )
...
add ability for opa inspect to inspect a single file outside of any bundle
Signed-off-by: Tyler Schade <tyler.schade@solo.io >
2024-07-21 20:22:52 +02:00
dependabot[bot]
d1fc7e92c1
build(deps): bump the go-opentelemetry-io group across 1 directory with 6 updates ( #6847 )
...
* build(deps): bump the go-opentelemetry-io group across 1 directory with 6 updates
Bumps the go-opentelemetry-io group with 3 updates in the / directory: [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib ), [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go ) and [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go ).
Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.46.1 to 0.53.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.46.1...zpages/v0.53.0 )
Updates `go.opentelemetry.io/otel` from 1.21.0 to 1.28.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.21.0...v1.28.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.21.0 to 1.28.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.21.0...v1.28.0 )
Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.21.0 to 1.28.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.21.0...v1.28.0 )
Updates `go.opentelemetry.io/otel/sdk` from 1.21.0 to 1.28.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.21.0...v1.28.0 )
Updates `go.opentelemetry.io/otel/trace` from 1.21.0 to 1.28.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.21.0...v1.28.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-opentelemetry-io
- dependency-name: go.opentelemetry.io/otel
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-opentelemetry-io
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-opentelemetry-io
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-opentelemetry-io
- dependency-name: go.opentelemetry.io/otel/sdk
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-opentelemetry-io
- dependency-name: go.opentelemetry.io/otel/trace
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: go-opentelemetry-io
...
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: Johan Fylling <johan.dev@fylling.se >
2024-07-20 08:25:08 +02:00
Ashutosh Narkar
252bf14f7c
build(deps): bump github.com/containerd/containerd from 1.7.19 to 1.7.20
...
Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com >
2024-07-19 13:40:44 -07:00
dependabot[bot]
cb427253ac
build(deps): bump github/codeql-action from 3.25.11 to 3.25.12
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.25.11 to 3.25.12.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/b611370bb5703a7efb587f9d136a52ea24c5c38c...4fa2a7953630fd2f3fb380f21be14ede0169dd4f )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-07-12 09:23:08 -07:00
dependabot[bot]
85458fa054
build(deps): bump actions/setup-go from 5.0.1 to 5.0.2
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 5.0.1 to 5.0.2.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/cdcb36043654635271a94b9a6d1392de5bb323a7...0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-07-11 10:32:08 -07:00
cli-docs-updater
a5cf9950e1
docs: Update generated CLI docs
2024-07-11 08:32:47 +00:00
Johan Fylling
e8aa24c262
format: Produce error when --rego-v1 formatted module has rule name conflicting with keyword ( #6867 )
...
Fixes : #6833
Signed-off-by: Johan Fylling <johan.dev@fylling.se >
2024-07-11 10:31:14 +02:00
Charlie Egan
9bd7b5a528
docs: Better link language SDKs ( #6866 )
...
The SDK support is there for many languages now and these
are likely a preferred way to use OPA's REST API for many
application developers.
This PR adds some links to make sure these are featured in
suitable locations so they are not missed as people browse
the docs.
Signed-off-by: Charlie Egan <charlie@styra.com >
2024-07-10 10:21:13 +01:00
dependabot[bot]
56a0fe020f
build(deps): bump aquasecurity/trivy-action from 0.23.0 to 0.24.0
...
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action ) from 0.23.0 to 0.24.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases )
- [Commits](https://github.com/aquasecurity/trivy-action/compare/7c2007bcb556501da015201bcba5aa14069b74e2...6e7b7d1fd3e4fef0c5fa8cce1229c54b2c9bd0d8 )
---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-07-09 08:52:50 -07:00
Johan Fylling
320991066f
Fix/reduced decision log locking ( #6859 )
...
Reducing amount of work performed inside global lock in decision log plugin.
Signed-off-by: Johan Fylling <johan.dev@fylling.se >
2024-07-09 10:02:40 +02:00
dependabot[bot]
a9cadd9eab
build(deps): bump actions/download-artifact from 4.1.7 to 4.1.8
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 4.1.7 to 4.1.8.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/65a9edc5881444af0b9093a5e628f2fe47ea3b2e...fa0a91b85d4f404e444e00e005971372dc801d16 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-07-08 08:54:00 -07:00
dependabot[bot]
caa9e553aa
build(deps): bump actions/upload-artifact from 4.3.3 to 4.3.4
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4.3.3 to 4.3.4.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/65462800fd760344b1a7b4382951275a0abb4808...0b2256b8c012f0828dc542b3febcab082c67f72b )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-07-08 08:45:11 -07:00
Magnus Jungsbluth
08d295f520
Allow unregistration of discovery listener ( #6851 )
...
Signed-off-by: Magnus Jungsbluth <magnus.jungsbluth@zalando.de >
2024-07-08 17:29:31 +02:00
dependabot[bot]
6cb6ab21ba
build(deps): bump golang.org/x/net from 0.26.0 to 0.27.0 ( #6863 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.26.0 to 0.27.0.
- [Commits](https://github.com/golang/net/compare/v0.26.0...v0.27.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-08 17:19:29 +02:00
dependabot[bot]
0679f29164
build(deps): bump actions/upload-artifact from 3.pre.node20 to 4.3.3 ( #6857 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 3.pre.node20 to 4.3.3.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v3-node20...65462800fd760344b1a7b4382951275a0abb4808 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-05 16:27:12 +02:00
dependabot[bot]
734196a34b
build(deps): bump actions/checkout from 4.1.1 to 4.1.7 ( #6856 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.1.1 to 4.1.7.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v4.1.1...692973e3d937129bcbf40652eb9f2f61becf3332 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-05 16:18:07 +02:00
dependabot[bot]
929ba5c26a
build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 ( #6858 )
...
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action ) from 2.3.1 to 2.3.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases )
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md )
- [Commits](https://github.com/ossf/scorecard-action/compare/0864cf19026789058feabb7e87baa5f140aac736...dc50aa9510b46c811795eb24b2f1ba02a914e534 )
---
updated-dependencies:
- dependency-name: ossf/scorecard-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-05 16:06:01 +02:00
dependabot[bot]
e0ad6b8554
build(deps): bump github/codeql-action from 3.24.9 to 3.25.11 ( #6855 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3.24.9 to 3.25.11.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v3.24.9...b611370bb5703a7efb587f9d136a52ea24c5c38c )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-07-05 15:50:58 +02:00
Johan Fylling
34349c5a6c
topdown: Adding cap to caches for regex and glob built-in functions ( #6846 )
...
Fixing possible memory leak where caches grow uncontrollably when large amounts of regexes or globs are generated or originate from the input document.
Fixes : #6828
Signed-off-by: Johan Fylling <johan.dev@fylling.se >
2024-07-05 11:18:37 +02:00
StepSecurity Bot
8d2b2a85ab
[StepSecurity] Apply security best practices ( #6853 )
...
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io >
2024-07-04 20:42:17 +02:00
Harshita Sao
ec03879a9c
added scorecard github action ( #6848 )
...
Signed-off-by: harshitasao <harshitasao@gmail.com >
2024-07-04 20:14:09 +02:00
Stephan Renatus
b9302f3998
build(go): bump 1.22.4 -> 1.22.5 ( #6845 )
...
https://groups.google.com/g/golang-announce/c/gyb7aM1C9H4
Also adds a new metric to our Prometheus tests.
Signed-off-by: Stephan Renatus <stephan@styra.com >
2024-07-04 10:48:20 +02:00
Manish Giri
c70544045b
Implement a built-in function for String count
...
Fixes #6827
Signed-off-by: Manish Giri <manish.giri.me@gmail.com >
2024-07-03 15:50:34 -07:00
dependabot[bot]
d93ff255cc
build(deps): bump github.com/containerd/containerd from 1.7.18 to 1.7.19
...
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd ) from 1.7.18 to 1.7.19.
- [Release notes](https://github.com/containerd/containerd/releases )
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md )
- [Commits](https://github.com/containerd/containerd/compare/v1.7.18...v1.7.19 )
---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-07-03 12:17:15 -07:00
dependabot[bot]
7964392b7c
build(deps): bump google.golang.org/grpc from 1.64.0 to 1.65.0
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.64.0 to 1.65.0.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.64.0...v1.65.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-07-03 11:44:33 -07:00
cli-docs-updater
b8a7809d99
docs: Update generated CLI docs
2024-07-02 13:11:57 +00:00
Tyler Schade
f37b5ccbc2
cmd+bundle: Add --follow-symlinks flag to include symlinked files when building bundles ( #6800 )
...
Signed-off-by: Tyler Schade <tyler.schade@solo.io >
2024-07-02 15:10:18 +02:00
Sven Grosen
e2721d3e01
Resurrect Workload Identity Work ( #6802 )
...
Add support for using Azure Workload Identity authentication.
Signed-off-by: Sven Grosen <svengrosen@gmail.com >
2024-07-01 20:02:06 +02:00
Charlie Egan
46b19707e7
docs: Use Example field for alternative commands ( #6837 )
...
* docs: Use Example field for alternative commands
This makes it safer to process this text into markdown and other
formats. (<path> is tricky as it looks like an HTML tag.
Signed-off-by: Charlie Egan <charlie@styra.com >
* docs: update CLI docs
Signed-off-by: Charlie Egan <charlie@styra.com >
---------
Signed-off-by: Charlie Egan <charlie@styra.com >
2024-07-01 10:36:39 +01:00
Johan Fylling
b5172db03b
Prepare v0.67.0 development ( #6835 )
...
Signed-off-by: Johan Fylling <johan.dev@fylling.se >
2024-06-27 16:32:00 +02:00
Johan Fylling
91348a8ccc
Prepare v0.66.0 release ( #6834 )
...
Signed-off-by: Johan Fylling <johan.dev@fylling.se >
v0.66.0
2024-06-27 16:16:32 +02:00
Philip Conrad
4e01537fe7
server/authorizer: Fix gzip payload handling. ( #6825 )
...
This PR fixes an issue where an OPA running authorization policies would
be unable to handle gzipped request bodies.
Example OPA CLI setup:
opa run -s --authorization=basic
Example request:
echo -n '{}' | gzip | curl -H "Content-Encoding: gzip" --data-binary @- http://127.0.0.1:8181/v1/data
This would result in unhelpful error messages, like:
```json
{
"code": "invalid_parameter",
"message": "invalid character '\\x1f' looking for beginning of value"
}
```
The cause was that the request body handling system in the
`server/authorizer` package did not take gzipped payloads into
account. The fix was to borrow the gzip request body handling function
from `server/server.go`, to transparently decompress the body when
needed.
Fixes : #6804
Signed-off-by: Philip Conrad <philipaconrad@gmail.com >
2024-06-27 09:55:19 +02:00
Johan Fylling
c2cede76b3
ast: expanding nested expressions in every domain ( #6832 )
...
Fixes : #6790
Signed-off-by: Johan Fylling <johan.dev@fylling.se >
2024-06-26 19:45:49 +02:00
cli-docs-updater
cb77956ed3
docs: Update generated CLI docs
2024-06-26 13:55:59 +00:00
Johan Fylling
e50a3061f5
cmd/exec: Supporting simultaneous input from stdin and files ( #6831 )
...
Signed-off-by: Johan Fylling <johan.dev@fylling.se >
2024-06-26 15:54:01 +02:00
cli-docs-updater
5647253da1
docs: Update generated CLI docs
2024-06-26 13:06:38 +00:00
Colin J Lacy
96800d747b
cmd/exec: adds --stdin-input (-I) flag for input piping or manual entry ( #6822 )
...
Signed-off-by: Colin Lacy <colinjlacy@gmail.com >
2024-06-26 15:04:54 +02:00
Johan Fylling
96ecf38a90
trace+tester: Adding local var values to trace and test report ( #6815 )
...
Fixing: #2546
Signed-off-by: Johan Fylling <johan.dev@fylling.se >
2024-06-25 14:31:12 +02:00