Ashutosh Narkar f48a4563db Bind OPA server to localhost interface by default ...

Currently OPA binds to the 0.0.0.0 interface by default, which allows
the OPA server to be exposed to services running outside of the same machine.
Though not inherently insecure in a trusted environment, it's good practice
to bind OPA to the localhost interface by default if OPA is not intended
to be exposed to remote services.

This change also adds a new feature flag to `opa run` to allow users to enable
future OPA compatible behavior.

Fixes: #6286

Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com>

2023-10-18 08:56:03 -07:00

..

internal

feat(cmd): Adding fail-non-empty flag (#6153)

2023-08-21 11:30:25 +02:00

bench_test.go

cmd: Extend e2e benchmarking mode to include OPA config (#5335)

2022-11-02 09:18:49 +01:00

bench.go

cmd: Extend e2e benchmarking mode to include OPA config (#5335)

2022-11-02 09:18:49 +01:00

build_test.go

bundle: Retain metadata annotations for Wasm entrypoints during inspection (#5603)

2023-02-03 12:15:21 +01:00

build.go

Add ability to specify namespace for optimized files

2023-06-25 09:42:39 -07:00

capabilities_test.go

cmd/capabilities: expose capabilities through CLI (#4588)

2022-04-26 10:57:48 +02:00

capabilities.go

chore: capbilities fixes (#5700)

2023-02-25 01:39:59 +01:00

check_test.go

ast: Enforce inlined schemas without --schemas flag (#5689)

2023-02-28 18:56:00 +01:00

check.go

ast: Enforce inlined schemas without --schemas flag (#5689)

2023-02-28 18:56:00 +01:00

commands.go

[cmd] Implement rootless deprecation messages

2023-07-14 11:38:17 -07:00

deps.go

remove github.com/pkg/errors

2023-01-11 10:30:48 -08:00

doc.go

Add package level GoDoc descriptions

2016-08-02 16:57:15 -07:00

eval_test.go

ast: Accept short-form else bodies (#6204)

2023-09-18 10:43:09 +02:00

eval_wasmtarget_test.go

cmd/eval: pass parsed input into rego package for wasm target if present (#3669)

2021-07-22 18:08:00 +02:00

eval.go

cmd: Fix formatting of discard subcommand help text

2023-07-19 01:08:23 -07:00

exec_test.go

feat(cmd): Adding fail-non-empty flag (#6153)

2023-08-21 11:30:25 +02:00

exec.go

feat(cmd): Adding fail-non-empty flag (#6153)

2023-08-21 11:30:25 +02:00

features.go

tracing: make otel dependency optional for rego+topdown (#4127)

2021-12-14 09:57:36 +01:00

filters.go

Update subcommands to support loader filter

2018-06-22 14:22:14 -07:00

flags.go

feature: add UnifyOp to tracer events (#5203)

2022-10-10 11:57:31 +02:00

fmt_test.go

fmt: report wrong arity for built-in functions

2023-03-27 10:45:11 -07:00

fmt.go

chore: don't use the deprecated ioutil functions (#5319)

2022-10-27 14:30:26 +02:00

inspect_test.go

loader: change extension handler type (#6015)

2023-06-16 09:37:33 +02:00

inspect.go

bundle: Retain metadata annotations for Wasm entrypoints during inspection (#5603)

2023-02-03 12:15:21 +01:00

oracle_test.go

cli: try fix issues reported in 'oracle' command (#5678)

2023-02-22 11:40:41 +01:00

oracle.go

cli: try fix issues reported in 'oracle' command (#5678)

2023-02-22 11:40:41 +01:00

parse_test.go

Add option to marshal location text (#6234)

2023-09-21 09:40:07 +01:00

parse.go

Add option to marshal location text (#6234)

2023-09-21 09:40:07 +01:00

refactor_test.go

chore: don't use the deprecated ioutil functions (#5319)

2022-10-27 14:30:26 +02:00

refactor.go

cmd: Add tooling to support package renaming

2021-04-08 14:04:03 -07:00

run_test.go

Bind OPA server to localhost interface by default

2023-10-18 08:56:03 -07:00

run.go

Bind OPA server to localhost interface by default

2023-10-18 08:56:03 -07:00

sign_test.go

loader: change extension handler type (#6015)

2023-06-16 09:37:33 +02:00

sign.go

cmd/build: don't expect key if alg is non-empty (#5343)

2022-11-02 13:53:34 +01:00

test_test.go

Don't use rounding for coverage calculation (#6308)

2023-10-12 06:49:09 +02:00

test.go

Adding lines not covered to test coverage threshold error message (#6272)

2023-10-04 15:08:14 +02:00

version_test.go

chore: Use t.Setenv in tests (#5321)

2022-10-27 17:44:56 +02:00

version.go

ci: publish multi-arch image manifest lists (#4254)

2022-01-24 19:00:09 +01:00