Checkpoint

testdata/policy/bogons.rego

@@ -0,0 +1,12 @@
+package styx
+
+default permit := true
+
+reject = 404 if {
+    #some addr in net.lookup_ip_addr(input.http_request.host)
+    styx.in_networks("bogons", input.http_request.host)
+}
+
+errors contains "Bogon destination not allowed" if {
+    reject == 404
+}