mirror of
https://github.com/open-policy-agent/opa.git
synced 2026-08-12 19:32:48 -06:00
Philip Conrad
01fc9ec013
This commit includes evaluator support for an opt-in, non-deterministic builtins caching system, designed to help with future replay of decision logs. The cache allows early-exit in the evaluator if the builtin is non-deterministic, and has already cached a result. Since the cache can be pre-populated by `rego` module users, this should make offline policy testing and future work around decision replay more straightforward. Fixes: #1514 Signed-off-by: Philip Conrad <philipaconrad@gmail.com>
95 lines
2.3 KiB
Go
95 lines
2.3 KiB
Go
// Copyright 2021 The OPA Authors. All rights reserved.
|
|
// Use of this source code is governed by an Apache2
|
|
// license that can be found in the LICENSE file.
|
|
|
|
// Import this package to enable evaluation of rego code using the
|
|
// built-in wasm engine.
|
|
package wasm
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/open-policy-agent/opa/internal/rego/opa"
|
|
wopa "github.com/open-policy-agent/opa/internal/wasm/sdk/opa"
|
|
)
|
|
|
|
func init() {
|
|
opa.RegisterEngine("wasm", &factory{})
|
|
}
|
|
|
|
// OPA is an implementation of the OPA SDK.
|
|
type OPA struct {
|
|
opa *wopa.OPA
|
|
}
|
|
|
|
type factory struct{}
|
|
|
|
// New constructs a new OPA instance.
|
|
func (*factory) New() opa.EvalEngine {
|
|
return &OPA{opa: wopa.New()}
|
|
}
|
|
|
|
// WithPolicyBytes configures the compiled policy to load.
|
|
func (o *OPA) WithPolicyBytes(policy []byte) opa.EvalEngine {
|
|
o.opa = o.opa.WithPolicyBytes(policy)
|
|
return o
|
|
}
|
|
|
|
// WithDataJSON configures the JSON data to load.
|
|
func (o *OPA) WithDataJSON(data interface{}) opa.EvalEngine {
|
|
o.opa = o.opa.WithDataJSON(data)
|
|
return o
|
|
}
|
|
|
|
// Init initializes the OPA instance.
|
|
func (o *OPA) Init() (opa.EvalEngine, error) {
|
|
i, err := o.opa.Init()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
o.opa = i
|
|
return o, nil
|
|
}
|
|
|
|
func (o *OPA) Entrypoints(ctx context.Context) (map[string]int32, error) {
|
|
return o.opa.Entrypoints(ctx)
|
|
}
|
|
|
|
// Eval evaluates the policy.
|
|
func (o *OPA) Eval(ctx context.Context, opts opa.EvalOpts) (*opa.Result, error) {
|
|
evalOptions := wopa.EvalOpts{
|
|
Input: opts.Input,
|
|
Metrics: opts.Metrics,
|
|
Entrypoint: opts.Entrypoint,
|
|
Time: opts.Time,
|
|
Seed: opts.Seed,
|
|
InterQueryBuiltinCache: opts.InterQueryBuiltinCache,
|
|
NDBuiltinCache: opts.NDBuiltinCache,
|
|
PrintHook: opts.PrintHook,
|
|
Capabilities: opts.Capabilities,
|
|
}
|
|
|
|
res, err := o.opa.Eval(ctx, evalOptions)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return &opa.Result{Result: res.Result}, nil
|
|
}
|
|
|
|
func (o *OPA) SetData(ctx context.Context, data interface{}) error {
|
|
return o.opa.SetData(ctx, data)
|
|
}
|
|
|
|
func (o *OPA) SetDataPath(ctx context.Context, path []string, data interface{}) error {
|
|
return o.opa.SetDataPath(ctx, path, data)
|
|
}
|
|
|
|
func (o *OPA) RemoveDataPath(ctx context.Context, path []string) error {
|
|
return o.opa.RemoveDataPath(ctx, path)
|
|
}
|
|
|
|
func (o *OPA) Close() {
|
|
o.opa.Close()
|
|
}
|