Deep Dive: Open Policy Agent
summary
Open Policy Agent runs as a standalone decision engine using the Rego language, already hitting 25,000 image pulls per week, 800+ Slack users and ~2,000 GitHub stars. Recent work ships a web-based playground, tracing filters and a 0.11 release, adds ~50 built-ins (regex/globs), and near-complete WebAssembly compilation so policies run without a sidecar. Experimental data-fetching, an iptables controller via Google Summer of Code, and a unit-test framework are available and in active use.
AI-written summary · about
chapters (12)
- 0:00Intro
- 1:55Example: Application
- 5:39Example: Kubernetes Platform
- 7:14OPA: Unified Policy Enforcement Across the Stack
- 8:40OPA: General-purpose Policy Engine
- 11:27Community Growth
- 12:54Community Highlights: Configuration Guardrails
- 15:32Community Highlights: Chef Automate LAM
- 16:42Community Highlights: RPG Engine
- 20:45v0.11: Improved Debugging: notes trace filter
- 23:20v0.11: Native Integrations: WebAssembly progress
- 26:44Use Case: Application & End-user Authorization
