OPA: So What Does the Policy Do?
summary
Explains how Open Policy Agent (OPA) works in practice: OPA runs as a single binary or sidecar, serves HTTP, and loads Rego policies plus JSON data at startup to evaluate inputs and external data and return allow/deny decisions. Demonstrates an Express middleware protecting a CFP app with two roles (speaker and staff), policy data in data.json, Rego rules for create/list operations, JWT signature validation using built‑in Rego functions, and end‑to‑end local tests; also highlights WebAssembly embedding, observability, and caching features.
AI-written summary · about
