~/talk

OPA Deep Dive

Talkat KubeCon + CloudNativeCon North America 2019 · on Wednesday, 2019-11-20· at 17:20· Pacific Ballroom, Salon 23-24 - Marriott Marquis San Diego Marina Hotel· [security]

speakers

name:Tim Hinrichs

links:none on file

name:Torin Sandall

github:tsandall

resources

video:https://youtu.be/Uj2N9S58GLU

slides:none on file

summary

OPA is a lightweight policy engine that takes JSON inputs and returns JSON decisions, used as a local daemon or Go library and integrated via Kubernetes admission webhooks to enforce rules like “all pod images must come from hooli.com” (demo returns deny plus error messages and handles containers and initContainers). It supports bundle distribution, decision logs, a test framework and Rego policies, can compile policies to WebAssembly for edge runtimes, and uses partial evaluation and indexing to cut evaluation time; some built-ins and partial-eval coverage remain works in progress.

AI-written summary · about

chapters (5)

related talks