bkhablenko
Joined 7 years ago
Karma
1
Submissions
2
Member since
Oct 29
Software Engineer at Very Good Security, Inc.
View on Hacker NewsRecent submissions
Comment · 7 years ago
Hey, thanks for the question. Policy testing is described in detail here: https://www.openpolicyagent.org/docs/latest/policy-testing/
As for where policies are stored, we keep them with the service and later mount in a K8s pod as a ConfigMap. OPA then downloads missing data from the Bundle Service. Integration testing is more or less the same, with OPA declared as a container in Docker Compose.