open-policy-agent / contrib

Integrations, examples, and proof-of-concepts that are not part of OPA proper.

Home Page:http://www.openpolicyagent.org/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

I have successfully installed OPA-PAM, now I can't sudo. Can you mention how to undo the OPA-PAM.

Leeladitya opened this issue · comments

I didn't implement the policies

@arcurtis is this something we can easily address in the README?

Hi @Leeladitya I added a short note to the installation instructions here: #118. Does this have enough info for you to resolve this?

Hello, Can you please mention me how to do that, as I am new to OPA environment. I referred the #118 but I am not sure how to do it. Pretty beginner!

@arcurtis A sample policy is what I need for a reference

@Leeladitya try this:

write a file policy.rego with the contents:

package sshd.authz
allow := true

then load the policy into OPA with the following:

curl localhost:8181/v1/policies/sshd/authz -XPUT --data-binary @policy.rego

its returning curl error failed to connect. I validated the hosts and its okay.

is there anything else, that I need to check? @arcurtis

@Leeladitya yes check that OPA is running on localhost:8181. This document is kubernetes-specific, but may have some useful information https://www.openpolicyagent.org/docs/latest/kubernetes-debugging/. Debugging and troubleshooting questions like this are best for the OPA slack https://slack.openpolicyagent.org

Closing this now as I believe the addition of #118 provides sufficient guidance for most to avoid this type of situation