Ashutosh Narkar 1ad567bf00 Add ability to configure Unix socket permissions ...

Currently if OPA listens on a Unix socket, the socket
file is created with 755 permissions. So if OPA is deployed
on k8s for example and the socket path is shared
via a volume between pods, due to the default permissions,
the socket will not be reachable for the caller. One way around
this is to match the user id for the OPA and caller containers
but that is not always possible.

This change adds a new flag to the OPA runtime that allows
to configure the permission of the socket file. In the
k8s scenario, if the file permission is updated to 777
for instance, the caller will be able to connect to OPA via
the socket.

Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com>

2023-05-02 09:07:23 -07:00

..

check_user_linux.go

runtime: Increase log level for rootless img msg

2023-04-07 13:42:19 -07:00

check_user_unix.go

runtime: Treat other Unix-es like macos (#4931)

2022-07-23 22:05:34 +02:00

check_user_windows.go

runtime: don't lookup current user on windows (#4802)

2022-06-22 07:31:15 +02:00

doc.go

Add package level GoDoc descriptions

2016-08-02 16:57:15 -07:00

logging_test.go

This change allows the HTTP clients to consume and send gzip compressed response and request body. (#5696)

2023-03-09 09:38:39 +01:00

logging.go

runtime: Remove deprecation warning for ?watch flag

2023-03-20 14:22:44 -07:00

plugins_test.go

Change check-lint to use golangci-lint (#3465)

2021-05-19 07:52:02 +02:00

runtime_test.go

Add info message when binding to 0.0.0.0 interface on server initialization

2023-04-03 15:51:50 -07:00

runtime.go

Add ability to configure Unix socket permissions

2023-05-02 09:07:23 -07:00