From 9c81fa73fc33695bae3627d730907ecc991f08d4 Mon Sep 17 00:00:00 2001
From: Patrick East <east.patrick@gmail.com>
Date: Mon, 9 Dec 2019 16:53:29 -0800
Subject: [PATCH] [stable/opa] Fix default OPA values.yaml and update to latest
 (#19480)

* [stable/opa] Fix default opa config.yaml

Historically opa by default is configured to download a bundle file
with default values.yaml options to allow for it to work with only
`helm install`. At some point this changed to not include the default
configuration which effectively breaks the defaults (and invalidates
the README that explains how to customize the policies further).

This change restores the config and updates it to the latest style of
bundle configuration using the `bundles` keyword.

Signed-off-by: Patrick East <east.patrick@gmail.com>

* [stable/opa] Update OPA and kube-mgmt versions

Bumping the versions of OPA and kube-mgmt to the latest and greatest.

The newer versions include bug fixes, performance enhancements, and
features that users should have.

Signed-off-by: Patrick East <east.patrick@gmail.com>
---
 stable/opa/Chart.yaml  |  4 ++--
 stable/opa/values.yaml | 22 +++++++++++-----------
 2 files changed, 13 insertions(+), 13 deletions(-)

diff --git a/stable/opa/Chart.yaml b/stable/opa/Chart.yaml
index 1fce2399c3..ef83911f23 100644
--- a/stable/opa/Chart.yaml
+++ b/stable/opa/Chart.yaml
@@ -1,12 +1,12 @@
 apiVersion: v1
-appVersion: 0.14.1
+appVersion: 0.15.1
 description: Open source, general-purpose policy engine. Enforce fine-grained invariants over arbitrary Kubernetes resources.
 name: opa
 keywords:
 - opa
 - admission control
 - policy
-version: 1.12.0
+version: 1.13.0
 home: https://www.openpolicyagent.org
 icon: https://raw.githubusercontent.com/open-policy-agent/opa/master/logo/logo.png
 sources:
diff --git a/stable/opa/values.yaml b/stable/opa/values.yaml
index 4be3882253..f96086f687 100644
--- a/stable/opa/values.yaml
+++ b/stable/opa/values.yaml
@@ -5,15 +5,15 @@
 # https://www.openpolicyagent.org/docs/configuration.html for more details.
 # Default value is no default config. For custom config, the opa key
 # needs to include the opa config yaml, eg:
-# opa:
-#   services:
-#     controller:
-#       url: https://some.bundle.host
-#   bundle:
-#     service: controller
-#     name: some-bundle-name.tgz
-#   default_decision: "/some_bundle_name/main"
-opa: false
+opa:
+  services:
+    controller:
+      url: 'https://www.openpolicyagent.org'
+  bundles:
+    quickstart:
+      service: controller
+      resource: /bundles/helm-kubernetes-quickstart
+  default_decision: /helm_kubernetes_quickstart/main
 
 # Setup the webhook using cert-manager
 certManager:
@@ -103,7 +103,7 @@ authz:
 
 # Docker image and tag to deploy.
 image: openpolicyagent/opa
-imageTag: 0.14.1
+imageTag: 0.15.1
 imagePullPolicy: IfNotPresent
 
 # Port to which the opa pod will bind itself
@@ -114,7 +114,7 @@ port: 443
 mgmt:
   enabled: true
   image: openpolicyagent/kube-mgmt
-  imageTag: 0.9
+  imageTag: "0.10"
   imagePullPolicy: IfNotPresent
   extraArgs: []
   resources: {}