Commit e93321bd authored by William Tucker's avatar William Tucker
Browse files

Fixed OPA server entrypoint in Ansible config

parent 4192ff00

deploy/ansible/roles/auth/defaults/main.yml

+3 −0
Original line number Diff line number Diff line
@@ -25,6 +25,9 @@ auth_enabled: false 
auth_policy_template: policy.rego.j2

auth_policy_restricted_paths: []



# Logging level for the OPA server

opa_log_level: debug



# Settings for the opa image

opa_image_prefix: "{{ image_prefix }}"

opa_image_tag: "{{ image_tag }}"

deploy/ansible/roles/auth/tasks/auth_install.yml

+7 −0
Original line number Diff line number Diff line
@@ -34,6 +34,13 @@ 
    volumes:

      # Mount the policy for the opa server

      - "/esg/config/auth/policy.rego:/policies/policy.rego:ro"

    entrypoint:

      - "/opa"

      - "run"

      - "--ignore=.*"  # exclude hidden dirs created by Kubernetes

      - "--log-level={{ opa_log_level }}"

      - "--server"

      - "/policies"

    state: started

    recreate: yes