ENV Vars not working opa as golang lib

[Siedlarczyk]

Hi all, sorry if this is a silly question.

I was trying to use opa.runtime().env.FOO in a policy, using embedded opa inside golang as a lib, but that doesn't seem to work at all.
Is there something I'm missing here?

When I run opa run as the standard binary, works just fine.

Can confirm the envs are properly set.

verify_action(id) = action { 
  base_url_env := opa.runtime().env.MANAGEMENT_API_URL
  timeout := opa.runtime().env.MANAGEMENT_API_URL_TIMEOUT
  base_url := sprintf(base_url_env,[id])
  response := http.send({"method": "get", "url": base_url, "timeout": timeout})
  response.status_code == 200
  action := response.body.Action
} else = action {
 action := "Alert"
}

this only works when replacing the env per literal string.

[anderseknert]

Hi @Siedlarczyk ! This should be what you're looking for.

[Siedlarczyk]

Is it possible to refer to the sole string I've inserted?

[anderseknert]

Sure! The example iterates over all env vars.. you could just change that to use a single one:

	// add env variables to rego query
	obj := ast.NewObject()
	env := ast.NewObject()
	for _, s := range os.Environ() {
		parts := strings.SplitN(s, "=", 2)
		if parts[0] == "MGMT_API" {
			env.Insert(ast.StringTerm(parts[0]), ast.StringTerm(parts[1]))
		}
	}
	ast := obj.Insert(ast.StringTerm("env"), ast.NewTerm(env))

I did not test this code, but it should give you an idea :)

[Siedlarczyk]

ast := obj.Insert(ast.StringTerm("env"), ast.NewTerm(env))

I might be missing something, but obj.Insert returns nothing

[Siedlarczyk]

and the point would be like, considering that rego.Runtime expects an *ast.Term, and I can build one from a string, would it be possible to refer to that sole string in the runtime?
Something like

opa.runtime().MGMT_API

[anderseknert]

No, the env attribute is a key-value object representing the environment variables set in the environment.

opa.runtime().env.MGMT_API

would be the way to do it.