nicholasjackson/opa-rego-language
Rego is the declarative policy language used by Open Policy Agent (OPA). This tile covers writing and testing Rego policies for Kubernetes admission control, Terraform and infrastructure-as-code plan validation, Docker container authorization, HTTP API authorization, RBAC and role-based access control, data filtering, metadata annotations with opa inspect, and OPA policy testing with opa test.
99
Quality
Pending
Does it follow best practices?
Impact
99%
1.19xAverage score across 31 eval scenarios
Pending
The risk profile of this skill
task.mdevals/scenario-31/
Regal: Testing Style — Authorization Policy with Tests
Write a Rego policy in the package api.authz that allows access based on role:
"admin"role → allow all methods"viewer"role → allow GET only- Any other role → deny
Then write a test file for it following these conventions:
- Test file named
authz_test.regowith packageapi.authz_test - Import the policy package:
import data.api.authz - Reference rules via the package alias:
authz.allow - Give each test a unique, descriptive name
- Test at least: admin allowed, viewer GET allowed, viewer POST denied, unknown role denied
Input
{"role": "admin", "method": "GET"}Expected behaviour
admin+ any method → allowviewer+ GET → allowviewer+ POST → denyguest+ GET → deny
docs
evals
scenario-1
scenario-2
scenario-3
scenario-4
scenario-5
scenario-6
scenario-7
scenario-8
scenario-9
scenario-10
scenario-11
scenario-12
scenario-13
scenario-14
scenario-15
scenario-16
scenario-17
scenario-18
scenario-19
scenario-20
scenario-21
scenario-22
scenario-23
scenario-24
scenario-25
scenario-26
scenario-27
scenario-28
scenario-29
scenario-30
scenario-31