OPA V1 support

[Geniekort]

Probably I'm overlooking an obvious fact but: we are running OPAL for Authz in a Kubernetes cluster. But the latest OPAL client docker image (0.8.0) runs OPA 0.70.0, while we are upgrading to OPA 1.2.

We can of course work our way through this by running OPAL client standalone container, and just running the latest OPA client container alongside it. However I'm curious whether there is a reason for OPAL client not using the latest OPA version?

[danyi1212]

Hey @Geniekort, thank you for reaching out! 🌟
Correct, OPAL currently comes included with OPA v0.70.0.

Due to OPA v1 having some breaking changes, we plan to change the default to OPA v1 on OPAL v1 release, to adhere with semver logic.

You can build a custom OPAL Client image with OPA v1 by running the command:

DOCKER_BUILD_ARGS="--build-arg opa_tag=1.0.0-static" make docker-build-client

or manually using Docker CLI

docker build -t permitio/opal-client --target client --build-arg opa_tag=1.0.0-static -f docker/Dockerfile .

Adjust the command for the right OPA version you desire.

Alternatively, as you've mentioned, you can use OPAL Client standalone image and run OPA separately from OPAL.

Let me know how it goes! 🙏💎

[Geniekort]

Hi @danyi1212 , thanks for the very fast reply. That totally makes sense, do you have any clue on the schedule for the OPAL v1 release?

For now we just went with the standalone OPA, that works like a charm 👍

[danyi1212]

We don't have a set estimate yet, but we are preparing for it 🙂

I recommend you join #opal on our Slack community to get follow along for updates, we will announce the release there 💎
https://io.permit.io/join_community