Open Policy Agent (OPA) is an open source, general-purpose policy engine.
-
Updated
May 30, 2024 - Go
The Open Policy Agent (OPA, pronounced “oh-pa”) is an open source, general-purpose policy engine that unifies policy enforcement across the stack. OPA provides a high-level declarative language that lets you specify policy as code and simple APIs to offload policy decision-making from your software. You can use OPA to enforce policies in microservices, Kubernetes, CI/CD pipelines, API gateways, and more.
What is OPA
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
Write tests against structured configuration data using the Open Policy Agent Rego query language
Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)
Open Policy Agent WebAssembly NPM module (opa-wasm)
Kubernetes Operator to manage Dynamic Admission Controllers using Open Policy Agent
Traefik plugin which checks JWT tokens for required fields. Supports Open Policy Agent (OPA) and signature validation with JWKS
A set of shared policies for use with Conftest and other Open Policy Agent tools
This is just a proof-of-concept project that aims to sign and verify container images using cosign and OPA (Open Policy Agent)
Open Policy Agent (OPA) plug-in for Kafka authorization
Experimental AWS ApiGateway Authorizer Go Lambda with embedded Open Policy Agent
Call Open Policy Agent (OPA) policies in WASM (Web Assembly) from .NET Core
Python client for Open Policy Agent
Enterprise OPA is a distribution of Open Policy Agent with enterprise-grade features to get OPA into production quickly, easily, and inexpensively.
Kong Plugin for Authorization (via Open Policy Agent)
mesh-kridik is an open-source security checker that performs various security checks on a Kubernetes cluster with istio service mesh and is leveraged by OPA (Open Policy Agent) to enforce security rules.
Sphinx extension that automatically documents Open Policy Agent Rego policies
A set of policies for Open Policy Agent to validate OpenAPI definitions.
Setup REST API with Open Policy Agent
Open Policy Agent Demo for Embed file in Go
Micronaut / OPA (Open Policy Agent) demo