Merge pull request #1491 from tedhabeck/opa-updates

Opa updates

Author: tedhabeck

plugins/external/opa/.env.template

@@ -4,7 +4,8 @@
 
 # Enable the plugin framework
 PLUGINS_ENABLED=false
-
+# default host port to listen on
+PLUGINS_SERVER_HOST=0.0.0.0
 # Enable auto-completion for plugins CLI
 PLUGINS_CLI_COMPLETION=false
 
@@ -22,5 +23,6 @@ PLUGINS_CONFIG=./resources/plugins/config.yaml
 # Configuration path for chuck mcp runtime
 CHUK_MCP_CONFIG_PATH=./resources/runtime/config.yaml
 
+PLUGINS_TRANSPORT=streamablehttp
 # Path to the repo policy file (optional, default: ./opaserver/rego/policy.rego)
 # POLICY_PATH=./opaserver/rego/policy.rego

plugins/external/opa/Containerfile

@@ -11,7 +11,7 @@ ARG SKILLS_SDK_COMMIT_ID
 ARG SKILLS_SDK_VERSION
 ARG BUILD_TIME_SKILLS_INSTALL
 
-ARG OPASERVER_VERSION=1.8.0
+ARG OPASERVER_VERSION=1.10.1
 ARG TARGETARCH
 
 ENV APP_HOME=/app

plugins/external/opa/Makefile

@@ -8,7 +8,7 @@ SHELL := /bin/bash
 PACKAGE_NAME = opapluginfilter
 PROJECT_NAME = opapluginfilter
 TARGET ?= opapluginfilter
-OPASERVER_VERSION ?= 1.8.0
+OPASERVER_VERSION ?= 1.10.1
 POLICY_PATH = "./opaserver/rego/policy.rego"
 
 # Virtual-environment variables

plugins/external/opa/README.md

@@ -40,7 +40,7 @@ The OPA plugin and loader configuration can be customized in `resources/plugins/
 
 ## Installation
 
-1. In the folder `external/opa`, copy .env.example .env
+1. In the folder `external/opa`, copy .env.template .env
 2. Add the plugin configuration to `plugins/external/opa/resources/plugins/config.yaml`:
 
 ```yaml
@@ -173,6 +173,18 @@ starting
 
 ## Testing with gateway
 
+### Authentication & Tokens
+Run the following from the project root folder:
+
+```bash
+# Generate JWT bearer token
+python3 -m mcpgateway.utils.create_jwt_token --username [email protected] --exp 10080 --secret my-test-key
+
+# Export for API calls
+export MCPGATEWAY_BEARER_TOKEN=$(python3 -m mcpgateway.utils.create_jwt_token --username [email protected] --exp 0 --secret my-test-key)
+```
+
+
 1. Add server fast-time that exposes git tools in the mcp gateway
 ```bash
 curl -s -X POST -H "Authorization: Bearer $MCPGATEWAY_BEARER_TOKEN" \