OPAL is an administration layer for Open Policy Agent (OPA), detecting changes to both policy and policy data in realtime and pushing live updates to your agents.
Check out OPAL's main site at OPAL.ac.
This image is the OPAL Client.
We have 3 image variants of OPAL:
| Tag | Description |
permitio/opal-server:<version> | Synchronizes the OPAL clients with up-to-date policy and data by pushing updates via a Pub/Sub channel over websockets. |
permitio/opal-client:<version> | Keeps the OPA agent cache up to date with realtime updates pushed from the OPAL server. Can selectively subscribe to specific topics of policy code (rego) and policy data. Comes prebuilt with an OPA agent inside the image. |
permitio/opal-client-standalone:<version> |
This image. Same as OPAL Client, but this image does not come with OPA installed. Pick this image instead of opal-client if you prefer to deploy OPA separately in its own container.
|
OPAL client require several environment variables that determine its configuration.
Check out the step-by-step guide how to set these environment variables correctly.
You must deploy OPA first if you are using this image.
# if this is the address OPAL client can find OPA in the network
export POLICY_STORE_URL=http://localhost:8181/v1
docker run -it \
--env OPAL_CLIENT_TOKEN \
--env OPAL_SERVER_URL \
--env OPAL_DATA_TOPICS \
--env POLICY_STORE_URL \
-p 7000:7000 \
permitio/opal-client
Content type
Image
Digest
sha256:ff0971c45…
Size
128.7 MB
Last updated
28 days ago
docker pull permitio/opal-client-standalone