v1.22.0

This release includes an new Apache Pulsar data source, a Bulk Eval HTTP API for evaluating a policy with multiple inputs in one request, and performance improvements when loading large bundles.

It also updates the OPA version used in Enterprise OPA to v0.65.0, and brings in various dependency bumps.

Pulsar Data Source

Enterprise OPA can now subscribe to Apache Pulsar topics:

# enterprise-opa.yaml
plugins:
 data:
 users:
 type: pulsar
 url: pulsar://pulsar.corp.com:6650
 topics:
 - users
 rego_transform: "data.pulsar.transform"

See the docs for more information.

Bulk HTTP API

You can now do multiple policy evaluations in one request:

POST /v1/batch/data/policy/allow
{
 "inputs": {
 "id-1": {
 "user": "alice",
 "action": "read",
 "resource": "book"
 },
 "id-2": {
 "user": "alice",
 "action": "create",
 "resource": "book"
 },
 "id-3": {
 "user": "alice",
 "action": "delete",
 "resource": "book"
 }
 }
}

The response looks like this:

{
 "responses": {
 "id-1": {
 "result": true
 },
 "id-1": {
 "result": true
 },
 "id-3": {
 "result": false
 },
 }
}

It supports the standard query parameters (like pretty, metrics, strict-builtin-errors).

Very large bundles performance

Previously, activating a bundle did some unneeded work.
It became apparent, and problematic, when using very large bundles (1+ GB).
The issue has been fixed, leading to noticable performance improvements when using very large bundles.