ewilliams28/releases
1
0
Fork 0
mirror of https://github.com/open-policy-agent/opa.git synced 2026-08-12 19:32:48 -06:00
Code Issues Packages Projects Releases Wiki Activity
5,310 Commits 45 Branches 221 Tags
9080232a9e53b438bf77a31377ca8c09f9b511b8
Commit Graph

5310 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Stephan Renatus 9080232a9e nightly: update trivy action, setup two DBs (#7108) 
This version of the action should use the cache, so it'll download the DB less
often. Also, it supports referecing two DBs, if the one errors, it should use
the other.

Signed-off-by: Stephan Renatus <stephan@styra.com>
 2024-10-09 11:09:57 +02:00
Hitoshi Kamezaki 2c76de45a1 plugins/rest/azure: Support managed identity for App Servivce / Container Apps 
IDENTITY_ENDPOINT and IDENTITY_HEADER envirnnment variables are
provided on Azure App Service for getting the token.
We can detect these variables and switch the endpoint
and header value from IMDS.

Fixes: #7085
Signed-off-by: Hitoshi Kamezaki <kamezaki@ap-com.co.jp>
 2024-10-08 20:18:14 -07:00
dependabot[bot] d937a2e9f7 build(deps): bump actions/upload-artifact from 4.4.0 to 4.4.1 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.4.0 to 4.4.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/50769540e7f4bd5e21e526ee35c689e35e0d6874...604373da6381bf24206979c74d06a550515601b9)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-10-08 09:34:56 -07:00
dependabot[bot] 9f6a069281 build(deps): bump github/codeql-action from 3.26.11 to 3.26.12 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.11 to 3.26.12.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea...c36620d31ac7c881962c3d9dd939c40ec9434f2b)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-10-08 09:34:45 -07:00
dependabot[bot] bbd898f42b build(deps): bump aquasecurity/trivy-action from 0.24.0 to 0.25.0 
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.24.0 to 0.25.0.
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](https://github.com/aquasecurity/trivy-action/compare/6e7b7d1fd3e4fef0c5fa8cce1229c54b2c9bd0d8...f781cce5aab226378ee181d764ab90ea0be3cdd8)

---
updated-dependencies:
- dependency-name: aquasecurity/trivy-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-10-08 09:34:33 -07:00
dependabot[bot] ca7266a3f8 build(deps): bump actions/checkout from 4.2.0 to 4.2.1 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.0 to 4.2.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/d632683dd7b4114ad314bca15554477dd762a938...eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-10-08 09:23:01 -07:00
dependabot[bot] b52342de43 build(deps): bump github.com/containerd/errdefs from 0.2.0 to 0.3.0 
Bumps [github.com/containerd/errdefs](https://github.com/containerd/errdefs) from 0.2.0 to 0.3.0.
- [Release notes](https://github.com/containerd/errdefs/releases)
- [Commits](https://github.com/containerd/errdefs/compare/v0.2.0...v0.3.0)

---
updated-dependencies:
- dependency-name: github.com/containerd/errdefs
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-10-08 09:17:52 -07:00
dependabot[bot] 4b87879767 build(deps): bump github/codeql-action from 3.26.10 to 3.26.11 (#7098) 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.10 to 3.26.11.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/e2b3eafc8d227b0241d48be5f425d47c2d750a13...6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-07 15:22:21 +02:00
dependabot[bot] 283d04af99 build(deps): bump docker/setup-buildx-action from 3.7.0 to 3.7.1 (#7099) 
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.7.0 to 3.7.1.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/8026d2bc3645ea78b0d2544766a1225eb5691f89...c47758b77c9736f4b2ef4073d4d51994fabfe349)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-07 15:00:33 +02:00
dependabot[bot] 36f4baff00 build(deps): bump golang.org/x/net from 0.29.0 to 0.30.0 (#7100) 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.29.0 to 0.30.0.
- [Commits](https://github.com/golang/net/compare/v0.29.0...v0.30.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-07 14:19:53 +02:00
dependabot[bot] 0000202736 build(deps): bump golang.org/x/time from 0.6.0 to 0.7.0 (#7101) 
Bumps [golang.org/x/time](https://github.com/golang/time) from 0.6.0 to 0.7.0.
- [Commits](https://github.com/golang/time/compare/v0.6.0...v0.7.0)

---
updated-dependencies:
- dependency-name: golang.org/x/time
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-07 14:07:14 +02:00
Anders Eknert 1d51c1df61 Replace use of yaml.v2 library with yaml.v3 (#7091) 
Some quirks encountered in the upgrade:
- Errors reported by the parser are now zero-indexed
- A few errors seemingly reported on the line after the
  error rather than where it happened
- Also a few tests where the line number reported
  *previously* seemed wrong but now is right
- Something different in how the parser unmarshalled to
  the "raw" schema annotation type we used. Changed to
  use a a map instead of that type alias.. but I'm not
  really sure why that had to be done

Perhaps worth looking into this further. But pushing this
now to start that discussion.

Fixes #7090

Signed-off-by: Anders Eknert <anders@styra.com>
 2024-10-06 03:54:06 +02:00
Johan Fylling 61c551c6a9 debug: Fixing step-over behaviour when exiting partial rules (#7096) 
The step-over action would previously skip over any associated partial "sibling" rules if performed on the last statement of a partial rule.
Now, step-over will break on any `enter` operation immediately preceded by an `exit` or `fail` operation; effectively breaking on every visited partial rule sharing a node in the rule-tree.

Signed-off-by: Johan Fylling <johan.dev@fylling.se>
 2024-10-04 14:22:54 +02:00
Philip Conrad 161cb2fdfd docs: Add Styra OPA ASP.NET Core SDK integration. 
Signed-off-by: Philip Conrad <philip@chariot-chaser.net>
 2024-10-03 16:58:10 -07:00
Matthew A Johnson c74b50a52a tests: Fixing test-time-0947 (#7093) 
Signed-off-by: Matthew Johnson <matjoh@microsoft.com>
 2024-10-03 16:37:40 +02:00
dependabot[bot] 0be0f77c1a build(deps): bump docker/setup-buildx-action from 3.6.1 to 3.7.0 (#7095) 
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.6.1 to 3.7.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/988b5a0280414f521da01fcc63a27aeeb4b104db...8026d2bc3645ea78b0d2544766a1225eb5691f89)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-03 15:35:20 +02:00
Philip Conrad f32ad09458 util+plugins: Fix potential memory leaks with explicit timer cancellation. (#7089) 
This commit adds a utility for explicitly creating cancelable timers, to avoid
possible memory leaks caused by some `<-time.After` timer receives in select
statements never being GC'd properly. This issue is fixed in Go 1.23, but
since we're still on Go 1.21, this will resolve the possibility of leaks in
the mean time.

Signed-off-by: Philip Conrad <philip@chariot-chaser.net>
 2024-10-02 15:56:56 -04:00
dependabot[bot] 69cd3886ea build(deps): bump google.golang.org/grpc from 1.67.0 to 1.67.1 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.67.0 to 1.67.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.67.0...v1.67.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-10-01 08:41:51 -07:00
Anders Eknert 6303aa201c Use new value cache for json.match_schema (#7081) 
I figured I'd test this out anyway, and this seemed like
a good case given that there was an actual issue on this.

Testing response times with OPA running as a server, and
the first request is ~800 ms while the following ones are
~10 ms.

Fixes #7011

Signed-off-by: Anders Eknert <anders@styra.com>
 2024-10-01 14:46:10 +02:00
dependabot[bot] 9a63133940 build(deps): bump github/codeql-action from 3.26.9 to 3.26.10 (#7083) 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.9 to 3.26.10.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/461ef6c76dfe95d5c364de2f431ddbd31a417628...e2b3eafc8d227b0241d48be5f425d47c2d750a13)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-10-01 13:54:19 +02:00
Matthew A Johnson 96447ada9f Updating compatibility information on the regocpp integration (#7078) 
Updating compatibility information on the regocpp intergration

Signed-off-by: Matthew Johnson <matjoh@microsoft.com>
 2024-09-30 18:02:45 +02:00
Stephan Renatus 5020260f25 nightly: try other trivy fix, use ECR (#7079) 
Signed-off-by: Stephan Renatus <stephan@styra.com>
 2024-09-30 16:22:18 +02:00
Johan Fylling dead0855ae Prepare v0.70.0 development (#7080) 
Signed-off-by: Johan Fylling <johan.dev@fylling.se>
 2024-09-30 16:07:10 +02:00
Ashutosh Narkar 4a3fd1a715 Prepare v0.69.0 release (#7076) 
Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com>
v0.69.0 		2024-09-30 15:09:00 +02:00
Anders Eknert af8f915846 Add mirror linter 
This flags unnecessary conversions of byte->string and vice versa

Signed-off-by: Anders Eknert <anders@eknert.com>
 2024-09-26 13:45:37 -07:00
Johan Fylling 71ab7ba986 debug: Always including Input and Data variable scopes 
even when there are no explicit `input` and `data` documents.

This makes discoverability of the scopes much better, as users will know to expect them.
Whereas, if it's only enabled/visible when there is an actual document, a user who
has not come across it before might not realize it should appear, and can therefore
be slow to realize scenarios where their setup is expecting an `input` document, but
is missing it for some reason.

Signed-off-by: Johan Fylling <johan.dev@fylling.se>
 2024-09-26 13:44:44 -07:00
Charlie Egan e16f22ab50 docs: Another minor update to README.md (#7072) 
'Want to download OPA' was highlighted as being a strange title.

Signed-off-by: Charlie Egan <charlie@styra.com>
 2024-09-26 21:31:47 +02:00
Johan Fylling 27dcd29922 rego-v1: Future-proofing misc tests to be 1.0 compatible 
This is the last few tests to be refactored before all tests are compatible with the v1-by-default switch coming in OPA 1.0.

Signed-off-by: Johan Fylling <johan.dev@fylling.se>
 2024-09-26 09:19:14 -07:00
dependabot[bot] 0385717711 build(deps): bump actions/checkout from 4.1.7 to 4.2.0 (#7069) 
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.7 to 4.2.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/692973e3d937129bcbf40652eb9f2f61becf3332...d632683dd7b4114ad314bca15554477dd762a938)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-26 17:55:56 +02:00
Stephan Renatus 5cbc1e0e49 topdown: glob|regex code nitpicks (#7071) 
No functional changes, just

- using ast.String(..) instead of ast.StringTerm(..).Value
- using const where package-level strings never change (metrics names)

Signed-off-by: Stephan Renatus <stephan@styra.com>
 2024-09-26 14:07:40 +02:00
Johan Fylling 4ba95d0cc4 format: Bracketing keyword ref elements in formatter output (#7010) 
Also future-proofing format pkg tests to be 1.0 compatible.

Signed-off-by: Johan Fylling <johan.dev@fylling.se>
 2024-09-26 10:24:19 +02:00
Anders Eknert 6148b0b38c Add APIwiz to adopters (#7067) 
Signed-off-by: Anders Eknert <anders@eknert.com>
 2024-09-26 09:03:28 +02:00
cli-docs-updater c487e393b3 docs: Update generated CLI docs 2024-09-25 22:47:28 +00:00
Johan Fylling 5521453d87 cmd: Adding --v0-compatible flag (#7065) 
To make OPA behave as v0.x post v1.0 release.
If used simultaneously with `--v1-compatible` flag, the `--v0-compatible` flag takes precedence.

Also, future-proofing `cmd` package tests for 1.0.

Signed-off-by: Johan Fylling <johan.dev@fylling.se>
 2024-09-26 00:45:51 +02:00
Charlie Egan 6e8b765226 docs: Readme updates (#7066) 
* docs: Readme updates

I have made a number of updates to the readme to highlight more
up-to-date information about the project and how to get started.

Signed-off-by: Charlie Egan <charlie@styra.com>

* Add running opa link

Signed-off-by: Charlie Egan <charlie@styra.com>

---------

Signed-off-by: Charlie Egan <charlie@styra.com>
 2024-09-25 19:03:03 +01:00
dependabot[bot] d76e51b5c1 build(deps): bump github/codeql-action from 3.26.8 to 3.26.9 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.8 to 3.26.9.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/294a9d92911152fe08befb9ec03e240add280cb3...461ef6c76dfe95d5c364de2f431ddbd31a417628)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-09-25 10:02:41 -07:00
dependabot[bot] 53898bc561 build(deps): bump github.com/agnivade/levenshtein from 1.1.1 to 1.2.0 
Bumps [github.com/agnivade/levenshtein](https://github.com/agnivade/levenshtein) from 1.1.1 to 1.2.0.
- [Commits](https://github.com/agnivade/levenshtein/compare/v1.1.1...v1.2.0)

---
updated-dependencies:
- dependency-name: github.com/agnivade/levenshtein
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-09-25 09:52:12 -07:00
Anders Eknert 98051b8168 Add Marsh McLennan to ADOPTERS.md (#7061) 
Fixes #7060

Signed-off-by: Anders Eknert <anders@styra.com>
 2024-09-25 11:49:45 +02:00
Stephan Renatus b0545a1af6 ADOPTERS: update some outdated items (#7062) 
Signed-off-by: Stephan Renatus <stephan@styra.com>
 2024-09-25 11:41:30 +02:00
dependabot[bot] 4720d9bfdc build(deps): bump go.uber.org/automaxprocs from 1.5.3 to 1.6.0 
Bumps [go.uber.org/automaxprocs](https://github.com/uber-go/automaxprocs) from 1.5.3 to 1.6.0.
- [Release notes](https://github.com/uber-go/automaxprocs/releases)
- [Changelog](https://github.com/uber-go/automaxprocs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/uber-go/automaxprocs/compare/v1.5.3...v1.6.0)

---
updated-dependencies:
- dependency-name: go.uber.org/automaxprocs
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-09-24 08:58:03 -07:00
Anders Eknert 74d5164fcc docs: Simplify the the Istio example policy (#7059) 
"required_roles" was a misnomer, and some other things got a minor face lift
while at it. For fun, also testing the underscore prefix convention for the
first time in the OPA docs.

Signed-off-by: Anders Eknert <anders@styra.com>
 2024-09-24 14:13:02 +02:00
Stephan Renatus 55aa75df84 build: bump github.com/golang/glob, remove replace directive (#7056) 
Just recently, glog introduced a fix for the potentially very expensive network
call on windows that had been troubling us before:

https://github.com/golang/glog/commit/97303146a4ffecf364d4300e07fca855d0062c43

It's become the v1.2.2 release.

The release is now in vendor, and the replacement has been removed.

Fixes #7024.

Signed-off-by: Stephan Renatus <stephan@styra.com>
 2024-09-24 12:16:02 +02:00
Ashutosh Narkar 2c56293695 Add a new inter-query value cache to cache data across queries 
This commit adds a new inter-query value cache that built-in
functions can use to cache information across queries.
For example, the `regex` and `glob` builtins can use this
to cache compiled regex and glob match patterns respectively.

The number of entries in the cache can be configured via the OPA
config. By default there is no limit.

Fixes: #6908

Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com>
 2024-09-23 13:03:03 -07:00
Johan Fylling f492f96d80 rego-v1: Future-proofing topdown pkg tests to be 1.0 compatible (#7014) 
Signed-off-by: Johan Fylling <johan.dev@fylling.se>
 2024-09-23 21:17:50 +02:00
Johan Fylling dbf980f78f rego-v1: Future-proofing plugins tests to be 1.0 compatible (#7044) 
Signed-off-by: Johan Fylling <johan.dev@fylling.se>
 2024-09-23 21:07:18 +02:00
Johan Fylling 09c1bdfc7c debug: Configurable rego-options on debugger (#7053) 
* debug: Configurable rego-options on debugger

Adding `RegoOption` launch option to debugger for setting custom rego options.

Fixes: #7045
Signed-off-by: Johan Fylling <johan.dev@fylling.se>
 2024-09-23 16:45:05 +02:00
Anders Eknert e959bce141 Fix: attach annotation to static part of rule ref (#7052) 
Previously, annotations were missing on rules that had variable
components in the ref head. Now we annotate the rule using the
path up to the first var.

Fixes #7050

Signed-off-by: Anders Eknert <anders@styra.com>
 2024-09-23 13:33:14 +02:00
Stephan Renatus e980731817 nightly: pass GITHUB_TOKEN to avoid rate limit error (#7051) 
Signed-off-by: Stephan Renatus <stephan@styra.com>
 2024-09-23 11:37:19 +02:00
Johan Fylling 6bfd4cdf92 rego-v1: Future-proofing Wasm tests to be 1.0 compatible (#7047) 
Signed-off-by: Johan Fylling <johan.dev@fylling.se>
 2024-09-20 22:35:29 +02:00
dependabot[bot] d150780797 build(deps): bump google.golang.org/grpc from 1.66.2 to 1.67.0 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.66.2 to 1.67.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.66.2...v1.67.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-09-20 12:36:22 -07:00