rego context aware #364
Merged
rego context aware #364
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
flavio
force-pushed
the
rego-context-aware
branch
from
93407bc to
6accdd3
Compare
This allows a better organization of the code Signed-off-by: Flavio Castelli <fcastelli@suse.com>
Add some fixtures to be used by Rego policies making use of context aware data Signed-off-by: Flavio Castelli <fcastelli@suse.com>
Allow to obtain the plural name of a Kubernetes resource via a callback query. This is required to enable OPA policies to be context aware. Signed-off-by: Flavio Castelli <fcastelli@suse.com>
flavio
force-pushed
the
rego-context-aware
branch
from
6accdd3 to
f5cac78
Compare
|
I've rebased against the |
viccuad
reviewed
Oct 25, 2023
viccuad
reviewed
Oct 25, 2023
viccuad
reviewed
Oct 25, 2023
viccuad
reviewed
Oct 25, 2023
viccuad
reviewed
Oct 25, 2023
viccuad
reviewed
Oct 25, 2023
viccuad
approved these changes
Oct 25, 2023
flavio
force-pushed
the
rego-context-aware
branch
from
f5cac78 to
49d5726
Compare
Allow Rego policies, both OPA and Gatekeeper ones, to leverage Kubernetes data at evaluation time. This change doesn't break the API of policy-evaluator, nor requires any special action by the consumers of this crate. Signed-off-by: Flavio Castelli <fcastelli@suse.com>
flavio
force-pushed
the
rego-context-aware
branch
from
5104232 to
2c19206
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR allows Rego policies to be context aware.
No change to the API of the crate is done. No special action must be done by the consumers of this library.
Fixes: #353