Comments (6)
Hi @oskar-christensson - I believe that the values for authorization and authentication here are mixed-up; meaning you should swap them, so it will be:
OPAL_INLINE_OPA_CONFIG: '{"authentication": "token", "authorization": "basic"}'
Let me know if that helps :)
We should probably improve the error message here, regardless (CC: @asafc , @roekatz )
from opal-helm-chart.
Thanks, that works.
2023-02-28T11:12:34.475776+0000 | opal_client.opa.runner | INFO | Running OPA inline: opa run --server --addr=:8181 --authentication=token --authorization=basic --log-level=info
from opal-helm-chart.
On that note, @orweis in order to get authorization working in OPA you need to provide something resolving to data.system.authz.allow
. Seems like in OPAL you'd want these files in the files
cli argument.
However, when running this helm chart - it does not seem possible to mount those files.
I would think that the ConfigMap would be a good place for this and mount the map as a volume in the pod.
How is one supposed to add data.system.authz.allow
policy to the client in this helm chart now?
from opal-helm-chart.
Fair point @oskar-christensson ; I don't think we've used this option with the helm-chart specifically so far.
I'll defer to our helm-chart master: @RazcoDev
from opal-helm-chart.
Right! That's fine.
I'll create a PR with this support.
from opal-helm-chart.
There's now a PR here:
#25
from opal-helm-chart.
Related Issues (17)
- Use ConfigMap to store env vars for client and server
- https://authorizon.github.io/opal-helm-chart/index.yaml returns 404 HOT 1
- Make image version dynamic HOT 2
- Installing v0.0.7 with default configuration on EKS not working HOT 5
- Configure postgres to pull from specified registry HOT 5
- enableServiceLink option not available in chart template HOT 1
- opal-client health check raises an exception or unhealthy HOT 18
- Client pods being deployed irrespective of values HOT 9
- OPAL Server breaks on startup if 'server.extraEnv.OPAL_SERVER_PORT' is missing HOT 4
- The term opal is missing from resource names HOT 3
- issue with using external_source_url HOT 8
- Chart do not permit use of specific docker credentials HOT 2
- 404 error on helm repo add command and index.yaml link on https://permitio.github.io/opal-helm-chart/ HOT 3
- Document how to setup authorization HOT 1
- OPAL_BUNDLE_IGNORE cannot be configured on helm chart HOT 2
- Image name are hardcoded values in chart HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from opal-helm-chart.