Roy Hiroyuki Osaki onelittlenightmusic

Lab Manager at Hitachi America, Software engineer, CKA, CKAD, CKS, The views and opinions expressed herein are on my own. He/him (大崎裕之 in Japanese)

onelittlenightmusic / ingress-ok2.yaml

Created February 19, 2020 08:43

	apiVersion: extensions/v1beta1
	kind: Ingress
	metadata:
	name: ingress-ok-2
	namespace: opa-example
	spec:
	rules:
	- host: test2.secondok.com
	http:
	paths:

onelittlenightmusic / ingress-bad.yaml

Last active February 19, 2020 08:43

	apiVersion: extensions/v1beta1
	kind: Ingress
	metadata:
	name: ingress-ok
	namespace: opa-example
	spec:
	rules:
	- host: signin.ng.com
	http:
	paths:

onelittlenightmusic / values.yaml

Created March 22, 2020 19:36

OPA helm chart values file

	admissionControllerKind: MutatingWebhookConfiguration
	opa: null
	mgmt:
	configmapPolicies:
	enabled: true
	namespaces: [opa, opa-example]
	requireLabel: true
	replicate:
	cluster:
	- v1/namespaces

onelittlenightmusic / install.sh

Created March 22, 2020 19:37

OPA install.sh

	kubectl create namespace opa
	helm repo add stable https://kubernetes-charts.storage.googleapis.com
	helm repo up
	helm install opa stable/opa -f helm-values.yaml --namespace opa

onelittlenightmusic / main.rego

Created March 22, 2020 19:39

Simple OPA mutation policy by Mr. Torin Sandall

	package system

	main = {
	"apiVersion": "admission.k8s.io/v1beta1",
	"kind": "AdmissionReview",
	"response": {
	"allowed": true,
	"patchType": "JSONPatch",
	"patch": patch_bytes,
	}

onelittlenightmusic / main-clipped.rego

Last active March 22, 2020 20:43

	main = { #Start of value
	"apiVersion": "admission.k8s.io/v1beta1",
	"kind": "AdmissionReview",
	"response": {
	"allowed": true,
	"patchType": "JSONPatch",
	"patch": patch_bytes,
	}
	} #End of value
	{ #Start of condition

onelittlenightmusic / table.md

Created March 23, 2020 03:29

onelittlenightmusic / 0-opa-json-cheatsheet.md

Last active August 20, 2021 20:30

Document for `jr`, `jb` or `jp`

`jr`, `jp`, `jb` (alias to `opa eval`): Cheatsheet

jr, jp and jb are commands for JSON modification.

$ data='{"name":"chris", "friends":["alice", "bob"]}'
# jr
$ echo $data | jr 'i.name'