Issue-6559 Add ability to create decision labels within a policy #6681

Currently the `raise_error` flag is not honored during the input validation step. So `http.send` will return an error if input validation fails irrespective of the `raise_error` flag status. This change attempts to fix that. Also the description of the `raise_error` flag is updated to reflect actual behavior. Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

DecisionLabel will be populated by the Custom Built-in. Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Actual definition and code will go here. Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Added to the EvalContext Struct. Created a method to pull the DecisionLabel object in from the SDK (opa.go; that update is coming shortly). Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

And the removal of an error in the opa_test.go file. Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

…nt#6562) Signed-off-by: Daniel Bass <daniel@permit.io> Co-authored-by: Daniel Bass <daniel@permit.io> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Bumps [github.com/spf13/viper](https://github.com/spf13/viper) from 1.18.1 to 1.18.2. - [Release notes](https://github.com/spf13/viper/releases) - [Commits](spf13/viper@v1.18.1...v1.18.2) --- updated-dependencies: - dependency-name: github.com/spf13/viper dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

…-agent#6565) This is a recognized content type now, so no need for the x prefix. I also fixed some language in the doc while at it. Signed-off-by: Anders Eknert <anders@eknert.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.7.12 to 1.7.13. - [Release notes](https://github.com/containerd/containerd/releases) - [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md) - [Commits](containerd/containerd@v1.7.12...v1.7.13) --- updated-dependencies: - dependency-name: github.com/containerd/containerd dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

…ST (open-policy-agent#6567) This change updates the description of how the url path is used to access values inside object and array documents. For data patch operations, the description was updated to reflect the implementation. Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.16.1 to 0.17.0. - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@0.16.1...0.17.0) --- updated-dependencies: - dependency-name: aquasecurity/trivy-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Signed-off-by: Or Ouziel <or.ouziel@elastic.co> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Bumps [github.com/opencontainers/image-spec](https://github.com/opencontainers/image-spec) from 1.1.0-rc5 to 1.1.0-rc6. - [Release notes](https://github.com/opencontainers/image-spec/releases) - [Changelog](https://github.com/opencontainers/image-spec/blob/main/RELEASES.md) - [Commits](opencontainers/image-spec@v1.1.0-rc5...v1.1.0-rc6) --- updated-dependencies: - dependency-name: github.com/opencontainers/image-spec dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Bumps [github.com/foxcpp/go-mockdns](https://github.com/foxcpp/go-mockdns) from 1.0.0 to 1.1.0. - [Release notes](https://github.com/foxcpp/go-mockdns/releases) - [Commits](foxcpp/go-mockdns@v1.0.0...v1.1.0) --- updated-dependencies: - dependency-name: github.com/foxcpp/go-mockdns dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.19.0 to 0.21.0. - [Commits](golang/net@v0.19.0...v0.21.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

…navailable Signed-off-by: slonka <slonka@users.noreply.github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.61.0 to 1.61.1. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.61.0...v1.61.1) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

…hen inspected Fixes: open-policy-agent#6591 Signed-off-by: Johan Fylling <johan.dev@fylling.se> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

…gent#6595) https://go.dev/doc/go1.22 Signed-off-by: Stephan Renatus <stephan@styra.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.61.1 to 1.62.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.61.1...v1.62.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Signed-off-by: Stephan Renatus <stephan@styra.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.18.0 to 1.19.0. - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/v1.19.0/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.18.0...v1.19.0) --- updated-dependencies: - dependency-name: github.com/prometheus/client_golang dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

…#6605) With .go-version containing 1.22, netlify fails to pick up the golang binary: 9:32:09 AM: Installing Go version 1.22 (requested 1.22) 9:32:09 AM: Failed to install Go version "1.22" 9:32:12 AM: Continue with existing version "1.19.13" and the build breaks with 1.19.x. Setting .go-version to 1.22.0 (with .0 at the end) matches the versioning scheme on https://go.dev/dl/, and it seems to succeed picking up the right go version for the website build: 9:33:35 AM: Installing Go version 1.22.0 (requested 1.22.0) 9:33:37 AM: go version go1.22.0 linux/amd64 Signed-off-by: Stephan Renatus <stephan@styra.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Signed-off-by: Manfred Moser <manfred@simpligility.ca> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.17.0 to 0.18.0. - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@0.17.0...0.18.0) --- updated-dependencies: - dependency-name: aquasecurity/trivy-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Added Mia-Platform to the OPA adopters list Signed-off-by: Federico Maggi <7142570+fredmaggiowski@users.noreply.github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.21.0 to 0.22.0. - [Commits](golang/net@v0.21.0...v0.22.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

https://groups.google.com/g/golang-announce/c/5pwGVUPoMbg Signed-off-by: Stephan Renatus <stephan@styra.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

This link should point to #annotations on the same page. Signed-off-by: Charlie Egan <charlie@styra.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Signed-off-by: Stephan Renatus <stephan@styra.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

…policy-agent#6621) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.62.0 to 1.62.1. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.62.0...v1.62.1) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

…n-policy-agent#6620) Bumps [github.com/golang/protobuf](https://github.com/golang/protobuf) from 1.5.3 to 1.5.4. - [Release notes](https://github.com/golang/protobuf/releases) - [Commits](golang/protobuf@v1.5.3...v1.5.4) --- updated-dependencies: - dependency-name: github.com/golang/protobuf dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

This fix preserves the brackets around set union operations when the inflix operator (`|`) is used. Previously the formatter would remove the brackets around the union operation, interpreting the expression as a comprehesion which would yeild unexpected results. Fixes: open-policy-agent#6588 Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

And replace AMD64 option with ARM64 as that's likely what most Macs run with these days. Fixes open-policy-agent#6622 Signed-off-by: Anders Eknert <anders@styra.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

…igning (open-policy-agent#6581) To support uses cases where OPA is used for signing s3 requests whose payload is not known upfront or payload is big enough (big file upload) to be sent over wire, this PR adds support for unsigned payloads. AWS signer has configurable option to use unsigned payload where the x-amz-content-sha256 is set to "UNSIGNED-PAYLOAD" and is included as part of signing process. This PR provides an option for unsigned payload if aws_config.disable_payload_signing is set to true. If payload signing is disabled, SignV4 method will not compute the content sha from the request body but instead use "UNSIGNED-PAYLOAD" string literal for x-amz-content-sha256 header during signature computation. References: https://docs.aws.amazon.com/AmazonS3/latest/API/sig-v4-header-based-auth.html https://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-auth-using-authorization-header.html Signed-off-by: Prasanth Jayachandran <p_jayachandran@apple.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

…on hooks documentation (open-policy-agent#6626) Signed-off-by: Robbie <robbie-cahill@proton.me> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.7.13 to 1.7.14. - [Release notes](https://github.com/containerd/containerd/releases) - [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md) - [Commits](containerd/containerd@v1.7.13...v1.7.14) --- updated-dependencies: - dependency-name: github.com/containerd/containerd dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Adding integration for Backstage Signed-off-by: Peter Macdonald <macdonald.peter90@gmail.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

…ent#6631) Not sure where to put this really as we don't have much in terms of docs on the CLI outside of the generated ones. If there are more places where this could be mentioned, let me know and I'll add it there too. Signed-off-by: Anders Eknert <anders@styra.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Signed-off-by: Philip Conrad <philipaconrad@gmail.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

…cy-agent#6633) This commit adds a `--timeout` duration flag to the `opa exec` CLI command. This flag helps out in use cases such as CI, where stalling indefinitely is undesirable behavior. Fixes: open-policy-agent#6613 Signed-off-by: Philip Conrad <philipaconrad@gmail.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Signed-off-by: Adam Setch <adam.setch@outlook.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Fixes: open-policy-agent#6640 Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Fixing two issues where Early Exit was being suppressed when it shouldn't have been: 1. A cache hit for a rule/function discards EE for the call-site. 2. Non-EE rule/func discards EE for call-site. Fixes: open-policy-agent#6566 Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Signed-off-by: occupyhabit <wangmengjiao@outlook.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Update remove description to mention that target path must exist. Signed-off-by: 0marq <45561584+0marq@users.noreply.github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Adds support for signing AWS requests using temporary credentials obtained from AWS STS via AssumeRole operation. One use-case of this mechanism is for allowing existing IAM users to access AWS resources that they don't already have access to. It is also useful as a means to temporarily gain privileged access. Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

…options. Fixes open-policy-agent#5882 (open-policy-agent#6643) Signed-off-by: Yogesh Sinha <sinhayogi@gmail.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

This change logs the error response body at debug level. Since the errors could contain senstive info we don't include them in the status message. So this approach helps to get more information about the error at debug log level which is mostly used in a non-prod setup. Fixes: open-policy-agent#6609 Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

The service name used for signing the request must be same as the host header which is of the form https://sts.* Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Let me know if these should be in a box of their own — my reasoning was that they should be avoided even prior to that, so if people won't use them as var names or whatever, all the better. Signed-off-by: Anders Eknert <anders@eknert.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

- link to the OPA v1.0 doc to add more context to the rego.v1 notes - CONTINUED to use https://www.openpolicyagent.org/docs/latest/policy-language/#future-keywords as the source of truth for notes about future keywords. - Removed some old style examples. Signed-off-by: Charlie Egan <charlie@styra.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Signed-off-by: Johan Fylling <johan.dev@fylling.se> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.18.0 to 0.19.0. - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@0.18.0...0.19.0) --- updated-dependencies: - dependency-name: aquasecurity/trivy-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Signed-off-by: Ashutosh Narkar <anarkar4387@gmail.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Bumps [peaceiris/actions-hugo](https://github.com/peaceiris/actions-hugo) from 2 to 3. - [Release notes](https://github.com/peaceiris/actions-hugo/releases) - [Changelog](https://github.com/peaceiris/actions-hugo/blob/main/CHANGELOG.md) - [Commits](peaceiris/actions-hugo@v2...v3) --- updated-dependencies: - dependency-name: peaceiris/actions-hugo dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Signed-off-by: yarivg <yarivgavriel2@gmail.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

These integrations feature on the learning rego page and the terraform pages respectively. Signed-off-by: Charlie Egan <charlie@styra.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

The cost of this can become non-trivial with larger inputs. Signed-off-by: Teemu Koponen <koponen@styra.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

This commit adds the possibility to configure the plugin manager with custom options. It will allow SDK users to override the options already provided by the SDK and to futher customize it with configurations that were not previously available. This is an advanced feature as it requires some knowledge about the inner workings of OPA. One use case for this is to provide a prometheus registerer and have the status plugin metrics available for the client to use it in a /metrics endpoint, for example. resolves open-policy-agent#6662 Signed-off-by: Francisco Rodrigues <ednofco@gmail.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

This commit fixes a panic that could occur when `opa build` was provided an entrypoint from both a CLI flag, and via entrypoint metadata annotation. The fix is simple: deduplicate the slice of entrypoint refs that the compiler uses, before compiling WASM or Plan targets. Fixes: open-policy-agent#6661 Co-authored-by: Daniel Herzig <danielherzig96@gmail.com> Signed-off-by: Philip Conrad <philipaconrad@gmail.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

This time for v0QueryPath, v1DataGet, and v1DataPost. Signed-off-by: Teemu Koponen <koponen@styra.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

https://go.dev/doc/devel/release#go1.22.2 Signed-off-by: Stephan Renatus <stephan@styra.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

…-agent#6671) Bumps [golang.org/x/net](https://github.com/golang/net) from 0.22.0 to 0.23.0. - [Commits](golang/net@v0.22.0...v0.23.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

…policy-agent#6673) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.62.1 to 1.63.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.62.1...v1.63.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Bumps [github.com/prometheus/client_model](https://github.com/prometheus/client_model) from 0.5.0 to 0.6.1. - [Release notes](https://github.com/prometheus/client_model/releases) - [Commits](prometheus/client_model@v0.5.0...v0.6.1) --- updated-dependencies: - dependency-name: github.com/prometheus/client_model dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

In workflow runs like this: https://github.com/open-policy-agent/opa/actions/runs/7803493290/job/21283458848#step:3:317 We can see two problems. This commit is meant to address them. First, the test failed with this message: ``` expected unknown certificate authority error but got: Get "https://127.0.0.1:38699/v1/data": write tcp 127.0.0.1:52786->127.0.0.1:38699: write: connection reset by peer ``` Now this step in the test is retried like the other steps in the test since it can fail too. Second, the error `failed to reload TLS config` appears many times in the logs for that test. This issue is caused by the server attempting to read the new cert, key, and CA contents from disk while they are still being written to. This PR also introduces a 100ms pause between upto 5 attempts to reload the config for any given change to the state on disk. This should mean that the error is seen only when is is actually an issue and the reload has failed after a reasonable time. In most cases, running locally, the reload happens without error on the first run. Signed-off-by: Charlie Egan <charlie@styra.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

…ty-printed" and/or line-prefixed JSON (open-policy-agent#6636) Fixes open-policy-agent#6630 Signed-off-by: Sean Williams <72675818+sean-r-williams@users.noreply.github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

This reflects the reality -- we hadn't been sure why the dependabot update had not increased the stanza when it should have; but doing so now should unbreak the nightly tests. Signed-off-by: Stephan Renatus <stephan@styra.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

…-agent#6680) Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.7.14 to 1.7.15. - [Release notes](https://github.com/containerd/containerd/releases) - [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md) - [Commits](containerd/containerd@v1.7.14...v1.7.15) --- updated-dependencies: - dependency-name: github.com/containerd/containerd dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.63.0 to 1.63.2. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.63.0...v1.63.2) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Improving memory footprint and execution time of deps command for policies with high dependency connectivity. Fixes: open-policy-agent#6685 Signed-off-by: Johan Fylling <johan.dev@fylling.se> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Signed-off-by: kunal.das <kd.kunaldas92@gmail.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Adding a global `rego_version` attribute to bundle manifest, to inform OPA runtime about what rego-version (v0/v1) to use to parse/compile contained Rego files. The rego-version of individual Rego files can be overridden through the `file_rego_versions` manifest attribute. Implements: open-policy-agent#6578 Signed-off-by: Johan Fylling <johan.dev@fylling.se> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

…policy-agent#6689) Fixing issue where active parser options aren't propagated to module reload during bundle activation. Signed-off-by: Francisco Rodrigues <ednofco@gmail.com> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Documenting bundle rego-version. Signed-off-by: Johan Fylling <johan.dev@fylling.se> Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

The DecisionLabel is no longer a Field of the DecisionOptions Struct because the field will always be nil. It is now generated directly within the Decision() Function where it can be populated. Due to this, the scenario being tested is impossible. For coverage, the scenario being tested by TestDecisionLoggingWithDecisionLabel is formally covered by the tests which confirm the proper function of the DecisionLabelAdd Builtin Function. Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Signed-off-by: Thomas Sidebottom <91754088+tsidebottom@users.noreply.github.com>

Using `goimports` to format the imports Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

The DecisionLabelAdd Builtin was added to the capabilities.json file to allow it to be tracked. Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

I missed this even after the GitHub Check told me to look here... Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

I added it to the list, but I forgot to add the actual description of the Builtin. Using the Check Generated Job version. Signed-off-by: Thomas Sidebottom <thomas.sidebottom@va.gov>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Issue-6559 Add ability to create decision labels within a policy #6681

Issue-6559 Add ability to create decision labels within a policy #6681

Commits on Apr 17, 2024

Commits on Apr 18, 2024

Issue-6559 Add ability to create decision labels within a policy #6681

Are you sure you want to change the base?

Issue-6559 Add ability to create decision labels within a policy #6681

Commits on Apr 17, 2024

Commits on Apr 18, 2024