Closed ereslibre closed 3 years ago
Policies can have three execution modes at the current time:
The policy-evaluator should contain logic and constants to both interpret and let kwctl annotate specify the execution mode of a policy.
kwctl annotate
If no execution mode of a policy is defined, the policy-evaluator can run some heuristics in order to decide what runtime it should use:
policy-evaluator
opa_wasm_abi_version
opa_wasm_abi_minor_version
Closing in favor of a dedicated issue on policy-server
Policies can have three execution modes at the current time:
The policy-evaluator should contain logic and constants to both interpret and let
kwctl annotate
specify the execution mode of a policy.If no execution mode of a policy is defined, the
policy-evaluator
can run some heuristics in order to decide what runtime it should use:opa_wasm_abi_version
andopa_wasm_abi_minor_version
globals, it can be identified as an OPA policy.