Can Burrito handle OPA?

[mathieux51]

Howdy folks,

Love the tool and I'd like to know if there is any way to have something like with Burrito:

terraform plan -out=tfplan
conftest test --policy deny_delete.rego tfplan

where deny_delete.rego looks like this:

package terraform

deny[msg] {
    input.request.resource_changes[_].change.actions[_] == "delete"
    msg = "Deletion of Terraform resources is not allowed."
}

[mathieux51]

Not sure who to ping, @spoukke maybe!

[marcantoinegodde]

@Alan-pad

[Alan-pad]

@mathieux51 Sorry didn't see your message here, we're shipping the logs integration feature at the moment (UI) and performance improvements (bandwidth usage) but our next big focus will revolve around audit hooks and OPA is in our mind for this feature ;)

Don't expect it to be out very soon though, maybe June/July if eveything goes smoothly

[mathieux51]

Thanks for your reply 🙏