mirror of
https://github.com/open-policy-agent/opa.git
synced 2026-08-17 22:13:00 -06:00
Ashutosh Narkar
0e69dbba20
The schema of the input document for the authorization policy is known to OPA. This feature leverages that to perform automatic type checking on the authorization policy. The checks happen on policies provided to OPA on start-up and also those provided via bundles. This check is enabled by default and can be disabled using the `--skip-known-schema-check` flag on `opa run`. This feature will help catch errors such as typos, mismatch types etc. in these policies and provide precise feedback to the policy author. Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com>
63 lines
1.7 KiB
Go
63 lines
1.7 KiB
Go
// Copyright 2018 The OPA Authors. All rights reserved.
|
|
// Use of this source code is governed by an Apache2
|
|
// license that can be found in the LICENSE file.
|
|
|
|
// Package runtime contains utilities to return runtime information on the OPA instance.
|
|
package runtime
|
|
|
|
import (
|
|
"os"
|
|
"strings"
|
|
|
|
"github.com/open-policy-agent/opa/ast"
|
|
"github.com/open-policy-agent/opa/util"
|
|
"github.com/open-policy-agent/opa/version"
|
|
)
|
|
|
|
// Params controls the types of runtime information to return.
|
|
type Params struct {
|
|
Config []byte
|
|
IsAuthorizationEnabled bool
|
|
SkipKnownSchemaCheck bool
|
|
}
|
|
|
|
// Term returns the runtime information as an ast.Term object.
|
|
func Term(params Params) (*ast.Term, error) {
|
|
|
|
obj := ast.NewObject()
|
|
|
|
if params.Config != nil {
|
|
|
|
var x interface{}
|
|
if err := util.Unmarshal(params.Config, &x); err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
v, err := ast.InterfaceToValue(x)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
obj.Insert(ast.StringTerm("config"), ast.NewTerm(v))
|
|
}
|
|
|
|
env := ast.NewObject()
|
|
|
|
for _, s := range os.Environ() {
|
|
parts := strings.SplitN(s, "=", 2)
|
|
if len(parts) == 1 {
|
|
env.Insert(ast.StringTerm(parts[0]), ast.NullTerm())
|
|
} else if len(parts) > 1 {
|
|
env.Insert(ast.StringTerm(parts[0]), ast.StringTerm(parts[1]))
|
|
}
|
|
}
|
|
|
|
obj.Insert(ast.StringTerm("env"), ast.NewTerm(env))
|
|
obj.Insert(ast.StringTerm("version"), ast.StringTerm(version.Version))
|
|
obj.Insert(ast.StringTerm("commit"), ast.StringTerm(version.Vcs))
|
|
obj.Insert(ast.StringTerm("authorization_enabled"), ast.BooleanTerm(params.IsAuthorizationEnabled))
|
|
obj.Insert(ast.StringTerm("skip_known_schema_check"), ast.BooleanTerm(params.SkipKnownSchemaCheck))
|
|
|
|
return ast.NewTerm(obj), nil
|
|
}
|