[OPA] Use opa-client package #3692
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
rokatyy
reviewed
Jul 4, 2025
| Action string `json:"action,omitempty"` | ||
| Ids []string `json:"ids,omitempty"` | ||
| } | ||
| OverrideHeader = "x-projects-role" |
Comment on lines
+35
to
+37
| OPAModeIguazio OPAMode = "iguazio" | ||
| OPAModeIguazioV4 OPAMode = "iguazio-v4" | ||
| OPAModeNop OPAMode = "nop" |
There was a problem hiding this comment.
Could it be that auth mode is old igz and opa mode is igz4 or same constants can be reused?
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Use the new https://github.com/nuclio/opa-client package as the HTTP OPA client.
This package was extracted from the
nuclio/nucliorepo so it can be used by other projects as well, so it basically has the same implementation.The only difference is that now both Query functions (Filter single & multiple resources) get a
ctxargument.The internal
opapackage is left to handle constants and helper functions that Nuclio uses, but are not specific to the client's implementation.A new
Modewas added to the OPA section in the platform config, as a prep for working with Iguazio V4.In V4, the resources are namespaced under either
/resourcesor/mgmt, so this prefix is added according to this mode.This is backwards compatible, as if no mode is provided - no prefix is added.
https://iguazio.atlassian.net/browse/NUC-507