Add OPA CLI setup and update local registry port

These are some edits I needed to make to get the e2e tests running.

There is a macOS service running on 5000 and others woll likely have that same
issue with 5000.

Signed-off-by: Charlie Egan <charlie_egan@apple.com>

Author: charlieegan3

.github/workflows/build.yaml

@@ -41,6 +41,9 @@ jobs:
           rename-to: skaffold
           chmod: 0755
       - run: just k3d
+      - uses: open-policy-agent/setup-opa@v2
+        with:
+          version: latest
       - run: pip install httpie
       - run: |
           just test-e2e-all

README.md

@@ -206,8 +206,14 @@ allow {
 * [Go language toolchain](https://go.dev/doc/install).
 * [just](https://github.com/casey/just#just) - generic command runner.
 * [skaffold](https://skaffold.dev/) - build and publish docker images and more, `v2.x` and above is required.
-* [helm](https://helm.sh/docs/intro/install/)- package manager for k8s.
+* [helm](https://helm.sh/docs/intro/install/) - package manager for k8s.
 * [k3d](https://k3d.io/#installation) - local k8s cluster with docker registry.
+* [kubectl](https://kubernetes.io/docs/tasks/tools/) - Kubernetes CLI.
+* [opa](https://www.openpolicyagent.org/docs#running-opa) - Open Policy Agent CLI (for e2e tests).
+* [staticcheck](https://staticcheck.io/docs/getting-started/) - Go static analysis tool (for linting).
+* [httpie](https://httpie.io/docs/cli/installation) - HTTP client (for e2e tests).
+* [jq](https://jqlang.github.io/jq/download/) - JSON processor (for e2e tests).
+* [crane](https://github.com/google/go-containerregistry/blob/main/cmd/crane/doc/crane.md) - Container image tool (optional, for inspecting images).
 
 This project uses `just` for building, testing and running `kube-mgmt` locally.
 It is configured from [justfile](./justfile) in root directory.

justfile

@@ -8,7 +8,7 @@ defaul:
   @just --list
 
 @_skaffold-ctx:
-  skaffold config set default-repo localhost:5000
+  skaffold config set default-repo localhost:5001 --kube-context k3d-kube-mgmt
 
 # build and publish image to release regisry, create chart archive
 build-release:
@@ -62,7 +62,7 @@ rebuild: && build
 
 # build and publish docker to local registry
 build: _skaffold-ctx
-  skaffold build --file-output={{skaffoldTags}} --platform=linux/amd64
+  skaffold build --file-output={{skaffoldTags}} --platform=linux/amd64 --kube-context=k3d-kube-mgmt
 
 # install into local k8s
 up: _skaffold-ctx down
@@ -75,11 +75,11 @@ up: _skaffold-ctx down
   fi
 
   kubectl delete cm -l kube-mgmt/e2e=true || true
-  skaffold deploy --build-artifacts={{skaffoldTags}}
+  skaffold deploy --build-artifacts={{skaffoldTags}} --kube-context=k3d-kube-mgmt
 
 # remove from local k8s
 down:
-  skaffold delete || true
+  skaffold delete --kube-context=k3d-kube-mgmt || true
 
 # run only e2e test script
 test-e2e-sh:

test/e2e/k3d.yaml

@@ -8,10 +8,10 @@ registries:
   create:
     name: kube-mgmt-registry
     host: "0.0.0.0"
-    hostPort: "5000"
+    hostPort: "5001"
   config: |
     mirrors:
-      "localhost:5000":
+      "localhost:5001":
         endpoint:
           - http://kube-mgmt-registry:5000
 ports:

test/e2e/replicate_auto/before.sh

@@ -1,6 +1,6 @@
 #!/usr/bin/env sh
 set -ex
 
-go run github.com/open-policy-agent/opa build -b $(dirname $0)/bundle -o $(dirname $0)/bundle.tar.gz
+opa build -b $(dirname $0)/bundle -o $(dirname $0)/bundle.tar.gz
 kubectl delete configmap bundle || true
 kubectl create configmap bundle --from-file $(dirname $0)/bundle.tar.gz