#

Open Policy Agent

The Open Policy Agent (OPA, pronounced “oh-pa”) is an open source, general-purpose policy engine that unifies policy enforcement across the stack. OPA provides a high-level declarative language that lets you specify policy as code and simple APIs to offload policy decision-making from your software. You can use OPA to enforce policies in microservices, Kubernetes, CI/CD pipelines, API gateways, and more.

Community & Support

Website

GitHub

Documentation

What is OPA

Here are 42 public repositories matching this topic...

replicatedhq / gatekeeper

Kubernetes Operator to manage Dynamic Admission Controllers using Open Policy Agent

kubernetes kubernetes-operator admission-controllers crd open-policy-agent kubebuilder

Updated Jan 17, 2019
Go

adaptant-labs / opa-audit-logging

Audit Logging for OPA Decision Logs

microservice audit audit-logs open-policy-agent

Updated Mar 9, 2020
Go

mhausenblas / noteless

A e2e demo of serverless technologies

aws aws-lambda serverless amazon-rekognition aws-dynamodb aws-fargate open-policy-agent rego amazon-eks

Updated Mar 17, 2020
Go

xunholy / konstraint

An easy way to generate Gatekeeper contraintTemplates from Rego files.

gatekeeper policies open-policy-agent rego

Updated Jun 22, 2020
Go

open-policy-agent / opa-envoy-spire-ext-authz

OPA-Envoy-SPIRE External Authorization Example.

authentication authorization service-mesh envoyproxy spiffe spire open-policy-agent

Updated Jul 22, 2020
Go

StatCan / aaw-kubeflow-opa-sync

Synchronize profile editors into the Open Policy Agent for use in MinIO Access Control / Synchronisation de données des éditeurs de profiles stockés dans Open Policy Agent, ceux-ci utilisés pour la contrôle d'accès à MinIO

kubernetes kubeflow open-policy-agent daaas aaw

Updated Oct 29, 2020
Go

ckotzbauer / k8spolicy

Check K8s yaml-files and helm-charts with rego policies

kubernetes security helm k8s open-policy-agent conftest

Updated Jul 23, 2021
Go

developer-guy / container-image-sign-and-verify-with-cosign-and-opa

This is just a proof-of-concept project that aims to sign and verify container images using cosign and OPA (Open Policy Agent)

go golang proof-of-concept opa open-policy-agent cosign cosign-http-wrapper

Updated Aug 4, 2021
Go

zotoio / sls-lambda-opa

Experimental AWS ApiGateway Authorizer Go Lambda with embedded Open Policy Agent

go golang lambda serverless-framework opa authorizer open-policy-agent

Updated Oct 11, 2021
Go

smaeda-ks / tf-cloud-opa-server

This example app acts as a webhook server that listens to Terraform Cloud Run Tasks and performs OPA evaluation using open-policy-agent Go API.

terraform opa open-policy-agent terraform-cloud

Updated Jun 6, 2022
Go

nkypy / gopa

open policy agent gin middleware for custom usage

middleware gin opa gin-gonic open-policy-agent

Updated Dec 13, 2022
Go

xchapter7x / hcunit

Helm Chart Unit: helps to unit test rendering of your templates using policies

unit-testing helm unittest opa unittesting unit-test unittests helm-plugin helm-plugins open-policy-agent rego

Updated Mar 7, 2023
Go

daichitakahashi / rego-validation-example

Examples for validation using Policy Language Rego

nodejs python golang validation webassembly wasm opa open-policy-agent rego

Updated Mar 16, 2023
Go

kove

cmacrae / kove

Watch your in cluster Kubernetes manifests for OPA policy violations and export them as Prometheus metrics

go kubernetes golang monitoring metrics prometheus prometheus-exporter opa observability open-policy-agent rego

Updated Jul 4, 2023
Go

kube-tarian / sigrun

Sign your artifacts, source code or container images using Sigstore tools, Save the Signatures you want to use, and Validate & Control the deployments to allow only the known Sources based on Signatures, Maintainers & other payloads automatically.

kubernetes containers signature opa artifacts gatekeeper signature-verification pods container-security open-policy-agent policy-as-code kubernetes-security cosign sigstore rekor fulcio kubernetessecurity containersecurity

Updated Jul 30, 2023
Go

edgeflare / traefikopa

Open Policy Agent (OPA) Authorization middleware for Traefik

opa traefik open-policy-agent traefik-plugin

Updated Aug 19, 2023
Go

SVilgelm / opa-codecov

Merge and convert the rego coverage format to codecov json

codecov open-policy-agent rego

Updated Feb 5, 2024
Go

m-mizutani / ghaudit

CLI audit tool for GitHub organization with OPA/Rego

github go open-policy-agent rego

Updated Dec 18, 2023
Go

CameronXie / go-opa-reviewer

OPA GitHub Pull Request Review Bot.

golang aws-lambda github-app open-policy-agent pull-request-review

Updated Jan 19, 2024
Go

quicsec / quicsec

HTTP/3-enable existing HTTP apps. Leverage HTTP3 native features and auto-enable workload identity (SPIFFE), AuthN (mTLS/x509, OIDC/Auth0-Okta), AuthZ (OPA), defense-in-depth (WAAP/WAF), and observability (metrics, logs, alerting, dashboard).

Updated Mar 20, 2024
Go

Followers: 16 followers
Repository: open-policy-agent/opa
Website: www.openpolicyagent.org

Related Topics

authorization open-source-policy policy policy-as-code