Open Policy Agent Deep Dive

on YouTube ↗33m

" summary

Open Policy Agent (OPA) is a graduated CNCF policy engine with ~200 contributors, ~6k GitHub stars and >100M Docker pulls that evaluates JSON inputs via a declarative language rego. Demo shows using opa eval and opa test to unit-test policies, running OPA as a sidecar or daemon, compiling policies to WASM, and Kubernetes validating webhooks enforcing rules (deny creations in default namespace, require a team label, warn if replicas < 2). Bundles, http.send and decision logging are used for data and scale.

AI-written summary · about

" chapters (13)

1. 0:00Start
2. 0:15Anders Eknert
3. 0:52Open Policy Agent
4. 3:20Community in numbers
5. 4:15OPA in production
6. 4:50Introduction
7. 6:27Deployment
8. 7:51Policy Authoring and Rego
9. 9:44Policy Data
10. 11:14OPA and Kubernetes
11. 11:26The Kubernetes API
12. 13:44Validating admission controller
13. 30:55Getting started

" related talks

• 45mOpen Policy Agent Deep DiveTim Hinrichs, Torin Sandall · KubeCon + CloudNativeCon Europe 2018
• 41mOpen Policy Agent (OPA) Intro & Deep DiveAnders Eknert, Will Beason · KubeCon + CloudNativeCon Europe 2022
• 29mIntroduction to Open Policy AgentRita Zhang, Ash Narkar · KubeCon + CloudNativeCon North America 2021
• 17mOpen Policy Agent IntroAsh Narkar, Oren Shomron · KubeCon + CloudNativeCon Europe 2021
• 45mOPA Deep DiveTim Hinrichs, Torin Sandall · KubeCon + CloudNativeCon North America 2019
• 38mPolicy as Code with Open Policy AgentAnders Eknert · CloudOpen @ Open Source Summit Europe 2022
• 29mOpen Policy Agent (OPA) Intro & Deep DiveAnders Eknert, Charlie Egan · KubeCon + CloudNativeCon Europe 2025
• 19mDynamic Authorization and Policy Control for Your Kubernetes ClusterAsh Narkar · Open Source Summit + Embedded Linux Conference + OSPOCon 2021