Currently all OPA image variants except "rootless" use
uid/gid 0 (i.e. root). Per container security best
practices it is better to run as non-root. So now OPA
defaults to non-root uid/gid in images. If root user
if needed, it can be explicitly set.
The "rootless" image variant is no longer needed and
will be not published in future releases.
Also currently the debug variant is published
for `linux/amd64` platform. For `linux/arm64` only static
images are generated. The debug variant can be useful
for debugging purposes and hence this change adds that
to the static image which can then be used on amd64 and arm64 arch.
Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com>
This commit fixes a typo in the GraphQL tutorial, and changes the
`optional` ID field to `required`, to better mimic real world usage.
Corresponding PR in the tutorial code repo: StyraInc/graphql-apollo-example#2
Co-authored-by: @dreglad
Signed-off-by: Philip Conrad <philipaconrad@gmail.com>
This commit adds support for AST objects to be usable in place of
strings for several of the GraphQL built-in functions, to improve
the composability of the GraphQL set of built-ins, and to dramatically
reduce the amount of redundant parsing when writing GraphQL policies.
Fixes: #4742
Signed-off-by: Philip Conrad <philipaconrad@gmail.com>
This commit updates the GraphQL tutorial to use port 6000 to be more
MacOS and Linux-friendly. It also moves the bundles to a folder to reduce
clutter.
Signed-off-by: Peter ONeill <peteroneilljr@gmail.com>
This commit fixes the formatting of "note" fields in the policy
reference document and adds a note about supporting custom GraphQL
`@directive` syntax in schemas.
It also corrects the GraphQL tutorial source code link, over in the
GraphQL API authz tutorial.
Signed-off-by: Philip Conrad <philipaconrad@gmail.com>
Ashutosh Narkar