github.com/chenbh/concourse/v6@v6.4.2/hack/overrides/opa.yml (about)

     1  # opa.yml - a docker-compose override that adds 'opa' to the stack.
     2  #
     3  # ref: https://www.openpolicyagent.org/
     4  # ref: https://docs.docker.com/compose/extends/
     5  #
     6  version: '3'
     7  
     8  services:
     9    web:
    10      environment:
    11        CONCOURSE_OPA_URL: http://opa:8181/v1/data/concourse/allow
    12        CONCOURSE_POLICY_CHECK_FILTER_HTTP_METHODS: PUT,POST
    13  
    14        # uncomment to configure
    15        # CONCOURSE_POLICY_CHECK_FILTER_ACTION: ListWorkers,ListContainers,UseImage
    16        # CONCOURSE_POLICY_CHECK_FILTER_ACTION_SKIP: PausePipeline,UnpausePipeline
    17  
    18    opa:
    19      image: openpolicyagent/opa
    20      command:
    21      - run
    22      - --server
    23      - --log-level=debug
    24      - --watch
    25      - /concourse-opa
    26      volumes:
    27      - ./hack/opa:/concourse-opa