Skip to content

Document how to setup authorization #56

@jrarmstro

Description

@jrarmstro

There should be more documentation explaining how to setup authorization in the OPAL client. There's plenty of documentation already available for authentication, but very little to do with authorization.

The official OPAL docs webpages should contain a section devoted to Rego authorization.

There already exists a Docker example of setting up authorization, but there's less documentation available on the Helm side. The opaStartupData option is not documented in values.yml.

A very basic Helm implementation of "authorization":

      client:
        extraEnv:
          OPAL_INLINE_OPA_CONFIG: '{"authorization": "basic", "files": ["/opt/opa/startup-data/authz.rego"]}'
        opaStartupData:
          authz.rego: |
            package system.authz
            default allow := true

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions