Added opa-profile

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,7 +1,11 @@
 #### What is this PR About?
 Describe the contents of the PR
 
-#### How do we test this?
-Have you followed the TESTING.md doc? If not, please provide commands/steps to test this PR.
+#### Check list
+- [ ] Have you created a test case in `_test/conftest-unittests.sh`
+- [ ] Have you created a test case in `_test/opa-profile.sh`
+- [ ] Have you created a test case in `_test/gatekeeper-integrationtests.sh`
+- [ ] Have you followed the TESTING.md doc? If not, please provide commands/steps to test this PR.
+- [ ] Have you re-generated `POLICIES.md`
 
 cc: @redhat-cop/rego-policies

.github/workflows/conftest.yaml

@@ -1,4 +1,4 @@
-name: Run conftest
+name: Run conftest-unittests.sh
 
 on: [push, pull_request]
 

.github/workflows/opa-profile.yaml

@@ -0,0 +1,22 @@
+name: Run opa-profile.sh
+
+on: [push, pull_request]
+
+jobs:
+  opa:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+
+      - name: Opa eval --profile
+        uses: garethahealy/github-actions/confbatstest@master
+        with:
+          tests: _test/opa-profile.sh
+          policies: '[{"name": "deprek8ion", "url":"github.com/swade1987/deprek8ion.git//policies"}]'
+
+      - name: Upload opa-profile.log
+        uses: actions/upload-artifact@v2
+        with:
+          name: profile-results
+          path: opa-profile.log

.gitignore

@@ -40,6 +40,7 @@ local.properties
 
 # BATS
 _test/test_helper/
+opa-profile.log
 
 ## Gatekeeper
 **/template.yaml

README.md

@@ -1,4 +1,4 @@
-![Run conftest](https://github.com/redhat-cop/rego-policies/workflows/Run%20conftest/badge.svg)
+![Run conftest-unittests.sh](https://github.com/garethahealy/rego-policies/workflows/Run%20conftest-unittests.sh/badge.svg)
 
 # rego-policies
 [Rego](https://www.openpolicyagent.org/docs/latest/policy-language/) policies collection.

TESTING.md

@@ -12,11 +12,18 @@ Each policy must have a BATS test executed by its usecase:
 - unit test files will be executed by [_test/conftest-unittests.sh](_test/conftest-unittests.sh).
 - integration test files will be executed by [_test/gatekeeper-integrationtests.sh](_test/gatekeeper-integrationtests.sh). 
 
+Each policy, if applicable, must have an `opa eval --profile` test executed by [_test/opa-profile.sh](_test/opa-profile.sh).
+
 ## Execute unit tests
 ```bash
 bats _test/conftest-unittests.sh
 ```
 
+## Execute profile tests
+```bash
+bats _test/opa-profile.sh
+```
+
 ## Execute integration units
 ```bash
 _test/deploy-gatekeeper.sh deploy_gatekeeper
@@ -38,5 +45,6 @@ The following tools must be installed locally:
 
 - [conftest](https://www.conftest.dev/install)
 - [konstraint](https://github.com/plexsystems/konstraint#installation)
+- [bats-core](https://github.com/bats-core/bats-core)
 - [jq](https://stedolan.github.io/jq/download)
 - [yq](https://pypi.org/project/yq)