OPA for the cloud natives

on YouTube ↗36m

" summary

Open Policy Agent evaluates JSON inputs and returns boolean or structured decisions using Rego policies tied to external data, so you can enforce API, Kubernetes and application rules (examples: admission checks, label/registry policies, hostNetwork disallow). Deploy as a Go library, co‑located daemonset/sidecar or local agent to avoid latency; combine with eBPF for runtime evidence. Production uses include DoorDash PR gating and Elastic’s Cloudbeat running CIS-based checks continuously and reporting failing rules.

AI-written summary · about

" chapters (4)

1. 0:00Start
2. 1:53Decouple policy from change control or application
3. 3:43PS: Compliance & audits
4. 31:30Open Policy Agent Philipp Krenn

" related talks

• 36mOpen Policy Agent: security for cloud natives and everyone elsePhilipp Krenn · DevOps Barcelona Conference 2023
• 38mOPA for the cloud nativesPhilipp Krenn · DevOpsDays Warsaw 2022
• 45mOpen Policy Agent Deep DiveTim Hinrichs, Torin Sandall · KubeCon + CloudNativeCon Europe 2018
• 35mOPA: The Cloud Native Policy EngineTorin Sandall · KubeCon + CloudNativeCon Europe 2018
• 19mDynamic Authorization and Policy Control for Your Kubernetes ClusterAsh Narkar · Open Source Summit + Embedded Linux Conference + OSPOCon 2021
• 29mOpen Policy Agent (OPA) Intro & Deep DiveAnders Eknert, Charlie Egan · KubeCon + CloudNativeCon Europe 2025
• 45mOPA Deep DiveTim Hinrichs, Torin Sandall · KubeCon + CloudNativeCon North America 2019
• 41mOpen Policy Agent (OPA) Intro & Deep DiveAnders Eknert, Will Beason · KubeCon + CloudNativeCon Europe 2022