OPA: The Cloud Native Policy Engine
summary
Open Policy Agent is a lightweight, host-local policy engine used at companies like Netflix to decouple decisions from enforcement; demos show API authz, admission control, and PII redaction working end-to-end against a sample microservice stack (employee reviews) with hot-reload and decision logging. It uses partial evaluation and a trie-based index to reduce search, yielding ~50 microseconds latency at 250 roles/bindings and ~60 µs as scale grows. A VS Code integration evaluates policies, runs unit tests and shows coverage.
AI-written summary · about
chapters (9)
- 0:00Introduction
- 1:16Decoupling Policy from Policy Enforcement
- 4:25What is OPA
- 7:10Lightweight Design
- 8:33Demo
- 13:34Policy Language
- 17:16RoleBased Access Control
- 22:47Integrations
- 26:17VS Code Integration
