Dynamic Authorization and Policy Control for Your Kubernetes Cluster

on YouTube ↗19m

" summary

Open Policy Agent (OPA) is a lightweight Go policy engine that evaluates JSON queries with the Rego language and runs as a sidecar, daemon, or compiled binary. Example: an admission controller rejects pod creates whose container image does not start with holy.com and reports missing CPU or memory limits; decisions include structured reasons and decision logs. Project stats: ~150 contributors, ~4,000 Slack members, ~5,000 GitHub stars, integrations with 20+ projects.

AI-written summary · about

" chapters (6)

1. 0:00Intro
2. 0:29Overview
3. 1:49Open Policy Agent
4. 9:14Admission Control
5. 12:01Policy Control
6. 18:55Outro

" related talks

• 34mFine-grained Authorization in a Containerized WorldAsh Narkar · Open Source Summit + Embedded Linux Conference North America 2019
• 17mOpen Policy Agent IntroAsh Narkar, Oren Shomron · KubeCon + CloudNativeCon Europe 2021
• 29mIntroduction to Open Policy AgentRita Zhang, Ash Narkar · KubeCon + CloudNativeCon North America 2021
• 38mPolicy as Code with Open Policy AgentAnders Eknert · CloudOpen @ Open Source Summit Europe 2022
• 33mOpen Policy Agent Deep DiveAnders Eknert · KubeCon + CloudNativeCon + Open Source Summit China 2021
• 45mOPA Deep DiveTim Hinrichs, Torin Sandall · KubeCon + CloudNativeCon North America 2019
• 25mPolicing Your Kubernetes Clusters with Open Policy Agent (OPA) - Mark Puddick & Amith NambiarMark Puddick, Amith Nambiar · Kubernetes Forum Sydney 2019
• 45mOpen Policy Agent Deep DiveTim Hinrichs, Torin Sandall · KubeCon + CloudNativeCon Europe 2018