charts: Update authz policy to be v1 compatible

charts/opa-kube-mgmt/templates/deployment.yaml

@@ -58,17 +58,18 @@ spec:
             TOKEN=`cat /bootstrap/mgmt-token`
             cat > /bootstrap/authz.rego <<EOF
             package system.authz
-            default allow = false
+            import rego.v1
+            default allow := false
             # Allow anonymous access to the default policy decision.
-            allow { input.path = [""]; input.method = "POST" }
-            allow { input.path = [""]; input.method = "GET" }
+            allow if { input.path = [""]; input.method == "POST" }
+            allow if { input.path = [""]; input.method == "GET" }
             # This is only used for health check in liveness and readiness probe
-            allow { input.path = ["health"]; input.method = "GET" }
+            allow if { input.path = ["health"]; input.method == "GET" }
 {{- if .Values.prometheus.enabled }}
             # This allows metrics to be scraped by prometheus
-            allow { input.path = ["metrics"]; input.method = "GET" }
+            allow if { input.path = ["metrics"]; input.method == "GET" }
 {{- end }}
-            allow { input.identity == "$TOKEN" }
+            allow if { input.identity == "$TOKEN" }
             EOF
 {{- end }}
 {{- range $policyName, $policy := .Values.bootstrapPolicies }}

charts/opa-kube-mgmt/values.yaml

@@ -112,7 +112,7 @@ hostNetwork:
 # OPA docker image configuration.
 image:
   repository: openpolicyagent/opa
-  tag: 0.69.0
+  tag: 1.0.1
   pullPolicy: IfNotPresent
 
 # One or more secrets to be used when pulling images