GitHub Action
Conftest OPA test runner
v1
Latest version
This action uses Conftest to run OPA policy as well as pull policy bundles from public or private OCI registry.
| Property | Default | Description |
|---|---|---|
| path | Required Path to resource file or helm chart | |
| policy | policy | Path to policy folder |
| namespace | main | Rego namespace (package) to use for testing |
| output | stdout | Conftest output format |
| pull_image | Registry to pull policies from. E.g. myregistry.azurecr.io/myopapolicies:0.0.1 |
|
| type | Supported: helm Will run additional tool(s), like helm conftest plugin |
REGISTRY_USER- Registry usernameREGISTRY_PWD- Registry password
name: Test
on: [push]
jobs:
test:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@master
- name: Run OPA tests
uses: ibiqlik/conftest-action-docker@master
with:
path: "mychart"
pull_image: "myregistry.azurecr.io/myopapolicies:0.0.1"
type: "helm"
env:
REGISTRY_USER: ${{ secrets.REGISTRY_USER }}
REGISTRY_PWD: ${{ secrets.REGISTRY_PWD }}
Test helm chart that has dependencies and need fetching before Conftest is ran
name: Test
on: [push]
jobs:
test:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@master
- name: Fetch dependencies
run: |
helm init --client-only
helm repo add MyPrivateRepoName https://myregistry.azure.io/helm --username ${{ secrets.REGISTRY_USER }} --password ${{ secrets.REGISTRY_USER }}
helm repo add bitnami https://charts.bitnami.com/bitnami
helm dependency build mychart
- name: Run OPA tests
uses: ibiqlik/conftest-action-docker@master
with:
path: "mychart"
pull_image: "myregistry.azurecr.io/myopapolicies:0.0.1"
type: "helm"
env:
REGISTRY_USER: ${{ secrets.REGISTRY_USER }}
REGISTRY_PWD: ${{ secrets.REGISTRY_PWD }}
name: Test
on: [push]
jobs:
test:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@master
- name: Run OPA tests
uses: ibiqlik/conftest-action-docker@master
with:
path: "my/k8s/resources/*" # Use wildcard to test all files inside a folder
namespace: "kubernetes.labels"
policy: "policy"
name: Test
on: [push]
jobs:
awsterraform:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@master
- name: Terraform plan
run: |
cd path/to/public_s3.tf
terraform init
terraform plan -out public_s3.tfplan
terraform show -json public_s3.tfplan > public_s3.json
- name: OPA tests
uses: ibiqlik/conftest-action-docker@master
with:
path: "path/to/public_s3.json"