Configuration

Command Line Parameters

This operator accepts the following command line parameters:

product-config

Default value: /etc/stackable/opa-operator/config-spec/properties.yaml

Required: false

Multiple values: false

stackable-opa-operator run --product-config /foo/bar/properties.yaml

watch-namespace

Default value: All namespaces

Required: false

Multiple values: false

The operator will only watch for resources in the provided namespace test:

stackable-opa-operator run --watch-namespace test

opa-bundle-builder-clusterrole

Default value: None. A value is generated automatically by Helm.

Required: false. When not specified, the environment variable OPA_BUNDLE_BUILDER_CLUSTERROLE must be present.

Multiple values: false

The name of the ClusterRole object that is referenced by the OPA pods. This object must exist in the Kubernetes cluster and is created by Helm.

Environment variables

This operator accepts the following environment variables:

PRODUCT_CONFIG

Default value: /etc/stackable/opa-operator/config-spec/properties.yaml

Required: false

Multiple values: false

export PRODUCT_CONFIG=/foo/bar/properties.yaml
stackable-opa-operator run

or via docker:

docker run \
    --name opa-operator \
    --network host \
    --env KUBECONFIG=/home/stackable/.kube/config \
    --env PRODUCT_CONFIG=/my/product/config.yaml \
    --mount type=bind,source="$HOME/.kube/config",target="/home/stackable/.kube/config" \
    docker.stackable.tech/stackable/opa-operator:latest

WATCH_NAMESPACE

Default value: All namespaces

Required: false

Multiple values: false

The operator will only watch for resources in the provided namespace test:

export WATCH_NAMESPACE=test
stackable-opa-operator run

or via docker:

docker run \
--name opa-operator \
--network host \
--env KUBECONFIG=/home/stackable/.kube/config \
--env WATCH_NAMESPACE=test \
--mount type=bind,source="$HOME/.kube/config",target="/home/stackable/.kube/config" \
docker.stackable.tech/stackable/opa-operator:latest

OPA_BUNDLE_BUILDER_CLUSTERROLE

Default value: None.

Required: true

Multiple values: false

The name of the cluster role to use for the OPA pods.

export OPA_BUNDLE_BUILDER_CLUSTERROLE=test
stackable-opa-operator run