Skip to content

misconfiguration of Trino OPA plugin #41

@leuwen-lc

Description

@leuwen-lc

'okdp-examples` pods fail with the following error: Query 20260225_165723_00003_g4bd5 failed: OPA policy named
http://opa.okdp.sandbox:80/v1/data/trino/allow did not return a value (or does not exist)

The OCI package quay.io/okdp/sandbox-packages-v0.1/trinodb:475.0.0-p01 published on the registry contains an access-control.properties configuration that enables the Trino OPA plugin:

access-control.name=opa
opa.policy.uri=http://opa.okdp.sandbox:80/v1/data/trino/allow
opa.http-client.http-proxy=opa.okdp.sandbox:80
opa.http-client.http-proxy.user=trino
opa.log-responses=true
opa.log-requests=true

No OPA service is deployed in the sandbox. Therefore, Trino refuses to execute any requests because the authorization policy is inaccessible.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions