OP-21546: Implementation OPA validation for runtime policies

front50/build.gradle

@@ -21,7 +21,7 @@ spinnakerBundle {
   version = rootProject.version
 }
 
-version = "v1.0.1"
+version = "v1.0.1-SNAPSHOT"
 
 subprojects {
   group = "com.opsmx.plugin.stage.custom"

front50/build/distributions/plugin-info.json

@@ -0,0 +1,17 @@
+{
+    "id": "Opsmx.StaticPolicyPlugin",
+    "description": "An example of a PF4J-based plugin that provides a custom pipeline stage.",
+    "provider": "https://github.com/opsmx",
+    "releases": [
+        {
+            "version": "v1.0.1-SNAPSHOT",
+            "date": "2023-12-18T12:26:11.987733Z",
+            "requires": "front50>=0.0.0",
+            "sha512sum": "83458e4245331599c526a6f94e2d3d0fac2a2b2fd695933c80a4d43b6aedc035eb56fa15aa100954c93ac3358f1015dc3c6193795f383ee04880c862a7668726",
+            "preferred": false,
+            "compatibility": [
+
+            ]
+        }
+    ]
+}

front50/custom-stage-front50/custom-stage-front50.gradle

@@ -19,7 +19,6 @@ apply plugin: "kotlin-spring"
 repositories {
   mavenCentral()
   jcenter()
-  maven { url "https://spinnaker-releases.bintray.com/jars" }
 }
 
 sourceSets {
@@ -42,32 +41,24 @@ dependencies {
   compileOnly "org.pf4j:pf4j:${pf4jVersion}"
   compileOnly "org.jetbrains.kotlin:kotlin-stdlib-jdk8:$kotlinVersion"
   compileOnly "com.netflix.spinnaker.kork:kork-plugins-api:${korkVersion}"
-  compileOnly 'com.netflix.spinnaker.kork:kork-web:7.105.0'
+  compileOnly "com.netflix.spinnaker.kork:kork-web:7.105.0"
+  compileOnly group: 'io.spinnaker.front50', name: 'front50-api', version: '2.27.3'
   kapt "org.pf4j:pf4j:${pf4jVersion}"
 
   compileOnly group: 'com.squareup.retrofit', name: 'retrofit', version: '1.9.0'
   compileOnly group: 'com.squareup.retrofit', name: 'converter-jackson', version: '1.9.0'
   compileOnly group: 'com.jakewharton.retrofit', name: 'retrofit1-okhttp3-client', version: '1.1.0'
   implementation group: 'com.jcraft', name: 'jsch', version: '0.1.55'
 
-   /*testImplementation "com.netflix.spinnaker.kork:kork-plugins-tck"
-  testImplementation(platform("io.spinnaker.front50:front50-bom:2.24.0"))
-
-  testImplementation "org.junit.jupiter:junit-jupiter-api:5.5.2"
-  testImplementation "io.strikt:strikt-core:0.22.1"
-  testImplementation "dev.minutest:minutest:1.10.0"
-  testImplementation "io.mockk:mockk:1.9.3"
-  testImplementation "com.fasterxml.jackson.module:jackson-module-kotlin:2.11.1"
-  testImplementation "javax.servlet:javax.servlet-api:4.0.1"*/
 
   testRuntime "org.junit.jupiter:junit-jupiter-engine:5.4.0"
   testRuntime "org.junit.platform:junit-platform-launcher:1.4.0"
   testRuntime "org.junit.platform:junit-platform-commons:1.5.2"
   implementation("org.apache.commons:commons-lang3:3.0")
 
   implementation 'com.google.code.gson:gson:2.8.8'
-  extraLibs group: 'com.netflix.spinnaker.front50', name: 'front50-core', version: '2.23.0'
-  configurations.compile.extendsFrom(configurations.extraLibs)
+  /*extraLibs group: 'com.netflix.spinnaker.front50', name: 'front50-core', version: '2.23.0'
+  configurations.compile.extendsFrom(configurations.extraLibs)*/
 }
 
 configurations.all {

front50/custom-stage-front50/src/main/java/com/opsmx/plugin/stage/custom/OpaConfigProperties.java

@@ -0,0 +1,92 @@
+package com.opsmx.plugin.stage.custom;
+
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.boot.context.properties.ConfigurationProperties;
+import org.springframework.boot.context.properties.EnableConfigurationProperties;
+import org.springframework.context.annotation.Configuration;
+
+import java.util.List;
+
+@Configuration
+@ConfigurationProperties(prefix = "policy.opa")
+@EnableConfigurationProperties({OpaConfigProperties.class, OpaConfigProperties.Policy.class})
+public class OpaConfigProperties {
+
+    private String url="http://opa:8181/v1/data";
+    private String resultKey="deny";
+    private boolean enabled=false;
+    private boolean proxy=true;
+    private boolean deltaVerification=false;
+    private List<Policy> staticpolicies;
+
+    public String getUrl() {
+        return url;
+    }
+
+    public void setUrl(String url) {
+        this.url = url;
+    }
+
+    public String getResultKey() {
+        return resultKey;
+    }
+
+    public void setResultKey(String resultKey) {
+        this.resultKey = resultKey;
+    }
+
+    public boolean isEnabled() {
+        return enabled;
+    }
+
+    public void setEnabled(boolean enabled) {
+        this.enabled = enabled;
+    }
+
+    public boolean isProxy() {
+        return proxy;
+    }
+
+    public void setProxy(boolean proxy) {
+        this.proxy = proxy;
+    }
+
+    public boolean isDeltaVerification() {
+        return deltaVerification;
+    }
+
+    public void setDeltaVerification(boolean deltaVerification) {
+        this.deltaVerification = deltaVerification;
+    }
+
+    public List<Policy> getStaticpolicies() {
+        return staticpolicies;
+    }
+
+    public void setStaticpolicies(List<Policy> staticpolicies) {
+        this.staticpolicies = staticpolicies;
+    }
+
+    @Configuration
+    @ConfigurationProperties(prefix = "policy.opa.staticpolicies")
+    public static class Policy {
+        private String name;
+        private String packageName;
+
+        public String getName() {
+            return name;
+        }
+
+        public void setName(String name) {
+            this.name = name;
+        }
+
+        public String getPackageName() {
+            return packageName;
+        }
+
+        public void setPackageName(String packageName) {
+            this.packageName = packageName;
+        }
+    }
+}