OPA middleware integration for DAPR

[peteroneilljr]

Original Requestor: ken_wee.pok
Original Thread: https://openpolicyagent.slack.com/archives/C1H0ZF6BE/p1649675395.948639

Message:

Hi everyone, I'm wondering if anybody had looked into/experimented the https://docs.dapr.io/reference/components-reference/supported-middleware/middleware-opa/OPA middleware> integration for DAPR? I have some questions with regards to the workings of OPA deployed in that manner, and not sure if this is a right place to ask? My question is specifically on

1. If external data can be supplemented to the middleware to aid decision making?
2. Which version of OPA is running in the middleware? (as OPA version affects new keywords support and built-in functions)
3. If all built-in functions for OPA are supported? e.g. http.send
4. How are upgrades to the OPA engine handled?
5. If changes to the policy (as part of component definition) requires a redeployment of the component itself?

[peteroneilljr]

Username: anders.eknert
I haven’t used that integration myself, but from looking at the https://github.com/dapr/components-contrib/blob/master/middleware/http/opa/middleware.gosource code> of that middleware, it looks like:

1. No, they don’t seem to provide a way to load external data into OPA.
2. They use an ancient version of OPA (https://github.com/dapr/components-contrib/blob/master/go.mod#L100v0.23.2>)
3. http.send should probably work, but there have been many functions and keywords added since v0.23.2!
4. You’ll probably need to submit a PR to have it upgraded.
5. No idea, probably best to raise an issue in their project.