opa
The Open Policy Agent (OPA, pronounced “oh-pa”) is an open source, general-purpose policy engine that unifies policy enforcement across the stack. OPA provides a high-level declarative language that lets you specify policy as code and simple APIs to offload policy decision-making from your software. You can use OPA to enforce policies in microservices, Kubernetes, CI/CD pipelines, API gateways, and more.
Community & Support
What is OPA
Here are 174 public repositories matching this topic...
The metrics reporting functions are found in a variety of locations as of the creation of this bug:
❯ find ./pkg -name "stats_reporter.go"
./pkg/controller/mutators/stats_reporter.go
./pkg/controller/constrainttemplate/stats_reporter.go
./pkg/controller/sync/stats_reporter.go
./pkg/controller/constraint/stats_reporter.go
./pkg/audit/stats_reporter.go
./pkg/mutation/stats_reporte-
Updated
Jan 25, 2022 - Open Policy Agent
-
Updated
Jan 18, 2022
-
Updated
Jan 25, 2022 - Go
-
Updated
Jan 12, 2022 - Go
The config endpoint was added after the Open API specs (see open_api directory), and should be added accordingly: https://www.openpolicyagent.org/docs/latest/rest-api/#config-api
-
Updated
Jan 14, 2022 - Go
We are currently using ConstraintTemplatesv1beta1, v1 has been available for some time now, we should switch to it.
https://open-policy-agent.github.io/gatekeeper/website/docs/constrainttemplates/
Arm7 support
-
Updated
Dec 31, 2021 - JavaScript
What would you like to be added:
Need to add verbiage to specify the requirement for signed commits for all contributions to the Contributing Docs
Why is this needed:
More clarity for prerequisites for new contributors.
-
Updated
Nov 26, 2020 - Go
-
Updated
Jan 20, 2022
-
Updated
Jan 15, 2022 - Open Policy Agent
more examples
It would be great if users looking at this library found starting points for different settings.
These come to mind, but I'm sure there are more:
- deno
- popular frontend projects, perhaps pick one and demo the scaffolding incl webpack
Is your feature request related to a problem? Please describe.
Ranger is a popular solution for big data permission verification, but it does not support AWS-S3 permission verification at present.
Describe the solution you'd like
At present, I have an idea that the Proxy intercepts the S3 request, sends the request to ranger-S3-Plugin for authorization verification, and then sends t
-
Updated
Aug 17, 2020
-
Updated
Jul 18, 2019 - Go
-
Updated
Aug 4, 2021 - Go
-
Updated
May 24, 2020 - Open Policy Agent
-
Updated
Oct 11, 2021 - Go
-
Updated
Jan 13, 2022 - Shell
-
Updated
Jan 22, 2022 - JavaScript
-
Updated
Oct 27, 2021
-
Updated
Jan 11, 2022 - Scala
- Repository
- open-policy-agent/opa
- Website
- www.openpolicyagent.org
Since we've started shipping binaries for that platform (#4254), it would be good to also run tests on it.
Note: the same would be true for windows; but we've skipped running tests there because of too many hardcoded assumptions about file paths in our tests. For linux/arm64, however, that should not be a problem.
The work done on the github workflow in #4254 could serve as an example: we'd