Open Policy Agent (OPA)
v1.14.0SecurityOPA v1.14.0 delivers significant rule indexing improvements for variable assignments and 'x in {...}' expressions, along with H2C Unix domain socket support, enhanced testing output, and various performance optimizations.
enhancementOptimize policy performance with improved rule indexing
The enhanced rule indexing for variable assignments and membership expressions will automatically improve performance for policies using patterns like 'x := input.role; x in {"admin", "user"}'. Review your existing policies to identify similar patterns that will benefit from this optimization without requiring code changes.
enhancementEnable H2C with Unix domain sockets for secure local communication
If you're running OPA in containerized environments or need secure local IPC, use the new '--h2c' flag with Unix domain sockets. This reduces network overhead and improves security for local service-to-service communication patterns.
enhancementLeverage custom storage backend API for specialized use cases
The new custom storage backend registration API enables integration with specialized storage systems. Evaluate if your current storage requirements could benefit from custom backends, particularly for high-performance or compliance-specific storage needs.
Key changes (6)
- Enhanced rule indexing for variable assignments and 'x in {...}' expressions improves query performance
- Added H2C protocol support with Unix domain sockets for 'opa run' command
- New line number display in test output for better debugging experience
- Custom storage backend registration API for extensibility
- Fixed race condition in plugin trigger management
- Performance improvements in array unification and JSON patch operations