Intro: Open Policy Agent
summary
Open Policy Agent is a general-purpose policy engine implemented as a host-local daemon or embeddable Go library that evaluates JSON inputs with the Rego language and keeps policy and data in memory for sub-millisecond API auth decisions. Production users include Netflix, Intuit and Chef; the project reports ~60 contributors, ~900 Slack members, ~2,000 stars and 20+ integrations (Kubernetes, Envoy, Terraform, PAM). Management uses a bundle service API for hitless updates and a decision log for audit; a typical binary is ~20 MB.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 0:55Overview of OPA
- 12:36Rago
- 13:26Running OPA
- 15:54Management APIs
- 18:10Implementing a Policy
- 25:58Integrations
- 28:19Netflix
- 29:39Chef
- 30:34Intuit
- 31:21Questions
