René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"OPA filter smoke tests","articleBody":"This is a tracking issue for discussing OPA filter testing. The idea is that in agent we want to be able to test OPA filter https://github.com/hypertrace/javaagent/tree/main/filter-custom-opa against running https://github.com/open-policy-agent/opa. The filter gets data from `/v1/data` and runs evaluation on every request.\r\n\r\nI would like to package https://github.com/open-policy-agent/opa into a docker container and make `data.json` and `/v1/policies/remote-bundle/traceable/http/request/policy.rego` configurable. This container could be used in smoke tests in all Hypertrace agents. There is already a docker container https://hub.docker.com/r/openpolicyagent/opa - we should have a look if it could be used. \r\n\r\nIn the meantime the OPA filter can be tested by:\r\n1. port-forwarding OPA agent from `traceableai` namespace `k port-forward service/opa 8181:8181 -n traceableai` \r\n2. get the data from OPA agent `curl localhost:8181/v1/data` and pick some IP address from `denylist`\r\n3. run agent on a test/demo app and do `curl localhost:8080 -H \"X-Forwarded-For: \u003cIP from deny list\u003e` - the request should be blocked with 403\r\n\r\ncc) @mohit-a21 @jcchavezs @davexroth ","author":{"url":"https://github.com/pavolloffay","@type":"Person","name":"pavolloffay"},"datePublished":"2020-12-07T15:25:57.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1},"url":"https://github.com/157/javaagent/issues/157"}