2019-10-07 22:09:33 +00:00
|
|
|
ansible-role-openpolicyagent
|
|
|
|
|
============================
|
|
|
|
|
|
2019-10-07 22:11:42 +00:00
|
|
|
The `ansible-role-openpolicyagent` ansible role installs and configures [Open Policy Agent](https://www.openpolicyagent.org/).
|
2019-10-07 22:09:33 +00:00
|
|
|
|
|
|
|
|
Requirements
|
|
|
|
|
------------
|
|
|
|
|
|
|
|
|
|
The role doesn't require any extra python requiremnets to use.
|
|
|
|
|
|
|
|
|
|
To run `molecule` on the other hand, you might need to do the following.
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
$ pip install -r molecule/requirements.txt
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
Role Variables
|
|
|
|
|
--------------
|
|
|
|
|
|
2019-10-07 22:11:42 +00:00
|
|
|
| Variable | Default | Description |
|
|
|
|
|
|:--------------------------------------------------------|:------------------------------------------------------------------------------------------:|:-------------------------------------------------|
|
|
|
|
|
| `openpolicyagent_version` | `v0.14.2` | OPA version |
|
|
|
|
|
| `openpolicyagent_home` | `/opt/opa` | OPA home directory |
|
|
|
|
|
| `openpolicyagent_bin` | `/opt/opa/bin` | OPA binary path |
|
|
|
|
|
| `openpolicyagent_name` | `opa` | OPA name of file to download |
|
|
|
|
|
| `openpolicyagent_user` | `opa` | OPA user to create and use |
|
|
|
|
|
| `openpolicyagent_group` | `opa` | OPA group to create and use |
|
|
|
|
|
| `openpolicyagent_base_url` | [Link](https://github.com/open-policy-agent/opa/releases/download) | OPA download base URL |
|
|
|
|
|
| `openpolicyagent_url` | [Link](https://github.com/open-policy-agent/opa/releases/download/v0.14.2/opa_linux_amd64) | OPA download URL |
|
|
|
|
|
| `openpolicyagent_config_path` | `/etc/opa` | OPA configuration base path |
|
|
|
|
|
| `openpolicyagent_config_d_path` | `/etc/opa/opa.d/` | OPA config.d path |
|
|
|
|
|
| `openpolicyagent_config_file` | `/etc/opa/config.yml` | OPA configuration file path |
|
|
|
|
|
| `*_openpolicyagent_services` | `[]` | OPA Services |
|
|
|
|
|
| `*_openpolicyagent_labels` | `{}` | OPA Labels |
|
|
|
|
|
| `*_openpolicyagent_bundles` | `[]` | OPA Bundles |
|
|
|
|
|
| `*_openpolicyagent_plugins` | `{}` | OPA Plugins |
|
|
|
|
|
| `openpolicyagent_config_default_decision` | `/system/main` | OPA Default Decision configuration |
|
|
|
|
|
| `openpolicyagent_config_default_authorization_decision` | `/system/authz/allow` | OPA Default Authorization Decision configuration |
|
|
|
|
|
| `openpolicyagent_config_decision_logs` | `{}` | OPA Decision Logs configuration |
|
|
|
|
|
| `openpolicyagent_config_status` | `{}` | OPA Status configuration |
|
|
|
|
|
| `openpolicyagent_config_discovery` | `{}` | OPA Discovery configuration |
|
2019-10-07 22:09:33 +00:00
|
|
|
|
|
|
|
|
License
|
|
|
|
|
-------
|
|
|
|
|
|
|
|
|
|
BSD 2 Clause
|
