Skip to content

Upgrading opa version - #3581

Merged
AlexanderYastrebov merged 1 commit into
zalando:masterfrom
amak3:upgrade-of-opa-version
Aug 7, 2025
Merged

Upgrading opa version#3581
AlexanderYastrebov merged 1 commit into
zalando:masterfrom
amak3:upgrade-of-opa-version

Conversation

@amak3

@amak3 amak3 commented Aug 6, 2025

Copy link
Copy Markdown
Collaborator

Upgrading OPA version and OPA envoy plugin versions from 1.4.2 to 1.7.1.

Important fix:

  • fix in OPA envoy plugin to be able to use JWT validation cache feature enabled in v1.1.0 OPA

Other notable changes:

  • faster builtin-function evaluation
  • allowing keywords in Rego references

OPA envoy plugin release notes:
v1.5.0-envoy-4
v1.6.0-envoy-2
v1.7.1-envoy

OPA release notes:
v1.5.0
v1.6.0
v.1.7.0

@amak3
amak3 force-pushed the upgrade-of-opa-version branch from bfe0340 to a88e962 Compare August 6, 2025 15:06
@AlexanderYastrebov AlexanderYastrebov added the dependencies Pull requests that update a dependency file label Aug 6, 2025
Signed-off-by: aleksandra-mak_zse <aleksandra.mak@zalando.de>
@amak3
amak3 force-pushed the upgrade-of-opa-version branch from 9b04158 to 05e7614 Compare August 7, 2025 08:44
@Pushpalanka
Pushpalanka requested a review from Copilot August 7, 2025 12:31

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR upgrades the Open Policy Agent (OPA) and OPA Envoy plugin from version 1.4.2 to 1.7.1. The upgrade includes a critical fix for JWT validation cache feature support, along with performance improvements and new language features.

  • Upgraded OPA core library from v1.4.2 to v1.7.1
  • Upgraded OPA Envoy plugin from v1.4.2-envoy to v1.7.1-envoy
  • Added support for InterQueryBuiltinValueCache interface to enable JWT validation caching

Reviewed Changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

File Description
go.mod Updates dependency versions for OPA libraries and transitive dependencies
filters/openpolicyagent/openpolicyagent.go Adds InterQueryBuiltinValueCache field and interface method to support JWT validation caching

@AlexanderYastrebov

Copy link
Copy Markdown
Contributor

👍

@AlexanderYastrebov
AlexanderYastrebov merged commit 9421217 into zalando:master Aug 7, 2025
16 of 17 checks passed
xavivars pushed a commit to xavivars/skipper that referenced this pull request Aug 21, 2025
Upgrading OPA version and OPA envoy plugin versions from 1.4.2 to 1.7.1.

Important fix:
- fix in OPA envoy plugin to be able to use JWT validation cache feature
enabled in v1.1.0 OPA

Other notable changes:
- faster builtin-function evaluation
- allowing keywords in Rego references

OPA envoy plugin release notes:

[v1.5.0-envoy-4](https://github.com/open-policy-agent/opa-envoy-plugin/releases/tag/v1.5.0-envoy-4)

[v1.6.0-envoy-2](https://github.com/open-policy-agent/opa-envoy-plugin/releases/tag/v1.6.0-envoy-2)

[v1.7.1-envoy](https://github.com/open-policy-agent/opa-envoy-plugin/releases/tag/v1.7.1-envoy)

OPA release notes:
[v1.5.0](https://github.com/open-policy-agent/opa/releases/tag/v1.5.0)
[v1.6.0](https://github.com/open-policy-agent/opa/releases/tag/v1.6.0)
[v.1.7.0](https://github.com/open-policy-agent/opa/releases/tag/v1.7.0)

Signed-off-by: aleksandra-mak_zse <aleksandra.mak@zalando.de>
Co-authored-by: aleksandra-mak_zse <aleksandra.mak@zalando.de>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants