-
- [ ] Review Forseti related Policy Library rules to ensure we are following recommended best practices. These templates will be models for other rules and we want to ensure we are modeling the right …
-
How does one allow entities to access attributes in OpenTDF? The examples show how to add attributes to TDF objects, but they don't show decryption of these objects after they were created with an att…
-
KBC fails to set policy in KBS and AS unless the rego file ends with an empty line.
Either make the code more tolerant or make it clear in docuemtation.
Example:
```sh
$ cat -n allow_all.reg…
-
## How to reproduce
```console
$ conftest -v
Conftest: 0.53.0
OPA: 0.65.0
```
1. Pull a policy. https://raw.githubusercontent.com/open-policy-agent/conftest/master/examples/spdx/policy/polic…
-
When using the `--v1-compatible` flag with OPA, it'll behave exactly as v1.0 OPA. Meaning a Rego file isn't required to use the `rego.v1` and `future.keywords` imports; e.g.:
```rego
package demo
…
-
## Short description
I am currently trying to trigger an error in a specific rule in rego in order to ensure that this specific codepath is only evaluated when it is actually needed.
While imple…
-
Seems like OPA/rego is becoming the de-facto policy language for Kubernetes. Gatekeeper seems to be gaining traction and there is talk of Pod Security Policies being deprecated in favor of something l…
-
For some users it might be more convenient to have their rego rules in a Git repo instead of having to put them in ConfigMaps.
For this we could copy the git-sync mechanism in Airflow to OPA servers.…
-
### Discussed in https://github.com/orgs/stayonhire/discussions/66
Originally posted by **dylanhru** November 11, 2023
Clint LVMD: Machine Risk assessments/ conditional rego:
All machines h…
-
See https://trustoverip.github.io/tswg-did-x509-method-specification/#identifier-syntax.
Follow up from [2024-03-07 meeting](https://wiki.trustoverip.org/display/HOME/2024-03-07+X.509+VID+TF+Meetin…