mirror of
https://github.com/open-policy-agent/opa.git
synced 2026-08-12 19:32:48 -06:00
Sebastian Spaink
40dd2b90d2
Follow-up to #8900. Moves the gzip encoding and decoding config validation off the Go `validateAndInjectDefaults` methods and onto embedded Rego policies, injecting defaults and reporting value errors. Each config registers its recognized options via `config.RegisterConfigSpec` so unknown-option warnings live with the owning struct. Field type validation stays in the Go decode step. --------- Signed-off-by: Sebastian Spaink <sebastianspaink@gmail.com>
40 lines
1.1 KiB
Bash
Executable File
40 lines
1.1 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Runs `opa test` over every directory that contains *_test.rego files, so Rego
|
|
# unit tests for embedded/internal policies are exercised in CI. build/policy is
|
|
# excluded because it is tested separately with its JSON schemas; test fixtures
|
|
# are excluded because they are not meant to be run as tests.
|
|
set -euo pipefail
|
|
|
|
OPA="${OPA:-opa}"
|
|
|
|
# The config validation policies import the helpers in this module, which the Go
|
|
# layer compiles into every policy, so it is loaded alongside each directory here.
|
|
CONFIG_UTIL=internal/configpolicy/util.rego
|
|
CONFIG_UTIL_DIR="./$(dirname "$CONFIG_UTIL")"
|
|
|
|
dirs=$(find . -name '*_test.rego' \
|
|
-not -path './build/policy/*' \
|
|
-not -path '*/testdata/*' \
|
|
-not -path '*/testfiles/*' \
|
|
-not -path '*/node_modules/*' \
|
|
-not -path './.git/*' \
|
|
-not -path './.claude/*' \
|
|
-exec dirname {} \; | sort -u)
|
|
|
|
if [ -z "$dirs" ]; then
|
|
echo "No Rego test directories found."
|
|
exit 0
|
|
fi
|
|
|
|
status=0
|
|
for d in $dirs; do
|
|
paths=("$d")
|
|
if [ "$d" != "$CONFIG_UTIL_DIR" ]; then
|
|
paths+=("$CONFIG_UTIL")
|
|
fi
|
|
echo "==> ${OPA} test ${paths[*]}"
|
|
"$OPA" test "${paths[@]}" || status=1
|
|
done
|
|
|
|
exit "$status"
|