Skip to content

Instantly share code, notes, and snippets.

@sbueringer

sbueringer/blog-opa-perf-optimized-authorization-query.reg.rb

Created February 23, 2019 14:03
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save sbueringer/a6fe84e8bac77bea45c4d1351ccb9d91 to your computer and use it in GitHub Desktop.
Save sbueringer/a6fe84e8bac77bea45c4d1351ccb9d91 to your computer and use it in GitHub Desktop.
Download ZIP
blog-opa-perf-optimized-authorization-query.reg.rb
Raw
blog-opa-perf-optimized-authorization-query.reg.rb
deny[{"id": id, "resolution": resolution}]
with input as {
"namespace":"dev",
"verb":"update",
"version":"v1",
"resource":"services",
"name":"grafana-svc"
"ui_user":"system:serviceaccount:default:controller",
"ui_group":[
"system:serviceaccounts",
"system:serviceaccounts:default",
"system:authenticated"
],
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment