releases

mirror of https://github.com/open-policy-agent/opa.git synced 2026-08-13 03:42:35 -06:00

Files

T

Ashutosh Narkar 5c183f5ecb Update OPA images to use non-root uid/gid by default

Currently all OPA image variants except "rootless" use
uid/gid 0 (i.e. root). Per container security best
practices it is better to run as non-root. So now OPA
defaults to non-root uid/gid in images. If root user
if needed, it can be explicitly set.

The "rootless" image variant is no longer needed and
will be not published in future releases.

Also currently the debug variant is published
for `linux/amd64` platform. For `linux/arm64` only static
images are generated. The debug variant can be useful
for debugging purposes and hence this change adds that
to the static image which can then be used on amd64 and arm64 arch.

Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com>

2023-03-02 08:46:09 -08:00

check_user_linux.go

Update OPA images to use non-root uid/gid by default

2023-03-02 08:46:09 -08:00

check_user_unix.go

runtime: Treat other Unix-es like macos (#4931 )

2022-07-23 22:05:34 +02:00

check_user_windows.go

runtime: don't lookup current user on windows (#4802 )

2022-06-22 07:31:15 +02:00

doc.go

Add package level GoDoc descriptions