add conftest utility for validating opa policy files

[rawc0der]

Conftest can be run as part of the 'otomi validate-policies' command, which will check defined
policy files from 'policies' folder against all generated manifests for current the defined values

[Morriz]

No, just move it in with validate-templates

[Morriz]

Forget what I said, having it as a separate otomi validate-policies step is fine. Makes it easier to distinguish

[Morriz]

looking good so far...after this we have to make gatekeeper-operator work with these files. I propose to remove charts/gatekeeper-operator-configs and put it's templates in values/gatekeeper-operator/config.gotmpl and iterate over those policies and inject them. We need a hash table of $name: $policyFilename in the top so we can dryly spit them out.

[Morriz]

please keep the review policies, so we can easily strip the .review.object part

[Morriz]

Ok, too many spaces converted to tabs, leading to too much to review. Pffff. Can you revert that?

I've added the regolint vscode extension which formats all .rego files changed. I can't revert that.

Then don't use that plugin? Is the OPA vscode plugin not doing what you want? It seems to lint beautifully. The plexsystems one you are now using is from a one man show, has 0 issues in it's git repo, and thus seems to not have many users.

[rawc0der]

Ok, too many spaces converted to tabs, leading to too much to review. Pffff. Can you revert that?

I've added the regolint vscode extension which formats all .rego files changed. I can't revert that.

Then don't use that plugin? Is the OPA vscode plugin not doing what you want? It seems to lint beautifully. The plexsystems one you are now using is from a one man show, has 0 issues in it's git repo, and thus seems to not have many users.

Hi, so i didn't use the official plugin because I never managed to evaluate policies using their embedded feature. Opened an issue here.
While evaluating policies or rego code is not working, formatting does and it was the only thing I needed, which was working OK with the other lighter version of the plugin.

[Morriz]

Any progress @rawc0der ? Can I do a review? I see a conflict in bin/otomi which I will resolve for you now.

[Morriz]

I fixed quite some issues because you did not rebase often. Please merge with master often!

[rawc0der]

Hi, you can review now. probably will add some extra .demo values, but the overall work is done.

[Morriz]

made some fixes myself so it can pass