mirror of
https://github.com/open-policy-agent/opa.git
synced 2026-08-13 03:42:35 -06:00
Anders Eknert
d2a415e25d
A tiny first step to have more tooling correctly report virtual and base document conflicts, as detailed in #7694. This PR fixes the `opa check` command to report conflicts of this type when the `-b`/`--bundle` flag is provided. The bundle flag is required as without that, `opa check` should only verify policies and not load data at all. While I was in the `cmd` directory, I got annoyed with how many of these commands store the same constants for their `--format` flag, so I decided to fix that too, even if it wasn't related to what I originally planned to do. I hope it's not too distracting. Signed-off-by: Anders Eknert <anders@styra.com>
56 lines
2.5 KiB
Go
56 lines
2.5 KiB
Go
package exec
|
|
|
|
import (
|
|
"errors"
|
|
"io"
|
|
"time"
|
|
|
|
"github.com/open-policy-agent/opa/cmd/formats"
|
|
"github.com/open-policy-agent/opa/v1/logging"
|
|
"github.com/open-policy-agent/opa/v1/util"
|
|
)
|
|
|
|
type Params struct {
|
|
Paths []string // file paths to execute against
|
|
Output io.Writer // output stream to write normal output to
|
|
ConfigFile string // OPA configuration file path
|
|
ConfigOverrides []string // OPA configuration overrides (--set arguments)
|
|
ConfigOverrideFiles []string // OPA configuration overrides (--set-file arguments)
|
|
OutputFormat *util.EnumFlag // output format (default: pretty)
|
|
LogLevel *util.EnumFlag // log level for plugins
|
|
LogFormat *util.EnumFlag // log format for plugins
|
|
LogTimestampFormat string // log timestamp format for plugins
|
|
BundlePaths []string // explicit paths of bundles to inject into the configuration
|
|
Decision string // decision to evaluate (overrides default decision set by configuration)
|
|
Fail bool // exits with non-zero exit code on undefined policy decision or empty policy decision result or other errors
|
|
FailDefined bool // exits with non-zero exit code on 'not undefined policy decisiondefined' or 'not empty policy decision result' or other errors
|
|
FailNonEmpty bool // exits with non-zero exit code on non-empty set (array) results
|
|
StdIn bool // pull input from std-in, rather than input files
|
|
Timeout time.Duration // timeout to prevent infinite hangs. If set to 0, the command will never time out
|
|
V0Compatible bool // use OPA 0.x compatibility mode
|
|
V1Compatible bool // use OPA 1.0 compatibility mode
|
|
Logger logging.Logger // Logger override. If set to nil, the default logger is used.
|
|
}
|
|
|
|
func NewParams(w io.Writer) *Params {
|
|
return &Params{
|
|
Output: w,
|
|
OutputFormat: formats.Flag(formats.JSON),
|
|
LogLevel: util.NewEnumFlag("error", []string{"debug", "info", "error"}),
|
|
LogFormat: util.NewEnumFlag("json", []string{"text", "json", "json-pretty"}),
|
|
}
|
|
}
|
|
|
|
func (p *Params) validateParams() error {
|
|
if p.Fail && p.FailDefined {
|
|
return errors.New("specify --fail or --fail-defined but not both")
|
|
}
|
|
if p.FailNonEmpty && p.Fail {
|
|
return errors.New("specify --fail-non-empty or --fail but not both")
|
|
}
|
|
if p.FailNonEmpty && p.FailDefined {
|
|
return errors.New("specify --fail-non-empty or --fail-defined but not both")
|
|
}
|
|
return nil
|
|
}
|