Struct OpaPolicy 

pub struct OpaPolicy {
    pub policy_id: String,
    pub version: u64,
    pub capability: String,
    pub tenant: Option<String>,
    pub priority: u32,
    pub entrypoint: String,
    pub module: String,
    pub data: Option<Value>,
    pub limits: Option<PolicyLimits>,
    pub scope: Option<Value>,
    pub metadata: Option<Value>,
}

Declarative OPA policy delivered to the executor.

Policies are grouped by capability and optionally scoped to a tenant. The Rego entrypoint should return a structured object containing the fields the executor expects (see executor::policy::PolicyDecisionEnvelope).

Fields

policy_id: String

Stable policy identifier used for updates/removals.

version: u64

Monotonic version number supplied by the control plane.

capability: String

Capability string (e.g. fs.read.v1).

tenant: Option<String>

Optional tenant scoping. None means policy applies to all tenants.

priority: u32

Lower numbers evaluate first. Defaults to 0 when omitted.

entrypoint: String

Fully-qualified entrypoint rule (e.g. data.smith.allow).

module: String

Rego module text.

data: Option<Value>

Optional static data block to load alongside the module.

limits: Option<PolicyLimits>

Optional execution limits override returned on allow decisions.

scope: Option<Value>

Optional scope metadata forwarded on allow decisions.

metadata: Option<Value>

Arbitrary metadata for observability/debugging.

Trait Implementations

impl Clone for OpaPolicy

fn clone(&self) -> OpaPolicy

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for OpaPolicy

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for OpaPolicy

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl PartialEq for OpaPolicy

fn eq(&self, other: &OpaPolicy) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Serialize for OpaPolicy

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl Eq for OpaPolicy

impl StructuralPartialEq for OpaPolicy