opa
The Open Policy Agent (OPA, pronounced “oh-pa”) is an open source, general-purpose policy engine that unifies policy enforcement across the stack. OPA provides a high-level declarative language that lets you specify policy as code and simple APIs to offload policy decision-making from your software. You can use OPA to enforce policies in microservices, Kubernetes, CI/CD pipelines, API gateways, and more.
Community & Support
What is OPA
Here are 184 public repositories matching this topic...
What steps did you take and what happened:
Needed to add the pod annotations
podAnnotations:
traffic.sidecar.istio.io/excludeOutboundIPRanges: 10.207.0.1/32
traffic.sidecar.istio.io/includeOutboundIPRanges: '*'
to avoid istio interfering with kubernetes API calls made by gatekeeper services.
The annotations are not applied to the job pods.
**What did you expect to happen
-
Updated
Mar 2, 2022 - Open Policy Agent
-
Updated
Feb 24, 2022
-
Updated
Mar 15, 2022 - Go
-
Updated
Mar 18, 2022 - Go
The config endpoint was added after the Open API specs (see open_api directory), and should be added accordingly: https://www.openpolicyagent.org/docs/latest/rest-api/#config-api
-
Updated
Mar 16, 2022 - Go
We are currently using ConstraintTemplatesv1beta1, v1 has been available for some time now, we should switch to it.
https://open-policy-agent.github.io/gatekeeper/website/docs/constrainttemplates/
Arm7 support
-
Updated
Feb 10, 2022 - JavaScript
What would you like to be added:
Need to add verbiage to specify the requirement for signed commits for all contributions to the Contributing Docs
Why is this needed:
More clarity for prerequisites for new contributors.
-
Updated
Feb 25, 2022 - Shell
-
Updated
Feb 5, 2022 - Go
-
Updated
Feb 27, 2022 - Open Policy Agent
Is your feature request related to a problem? Please describe.
Ranger is a popular solution for big data permission verification, but it does not support AWS-S3 permission verification at present.
Describe the solution you'd like
At present, I have an idea that the Proxy intercepts the S3 request, sends the request to ranger-S3-Plugin for authorization verification, and then sends t
more examples
It would be great if users looking at this library found starting points for different settings.
These come to mind, but I'm sure there are more:
- deno
- popular frontend projects, perhaps pick one and demo the scaffolding incl webpack
-
Updated
Aug 17, 2020
-
Updated
Jul 18, 2019 - Go
-
Updated
Aug 4, 2021 - Go
-
Updated
Jan 9, 2022 - Go
-
Updated
Oct 11, 2021 - Go
-
Updated
May 24, 2020 - Open Policy Agent
-
Updated
Mar 16, 2022 - Shell
-
Updated
Jan 22, 2022 - JavaScript
-
Updated
Oct 27, 2021
- Repository
- open-policy-agent/opa
- Website
- www.openpolicyagent.org
What part of OPA would you like to see improved?
I am aware that in OPA tests we can mock the input provided in each test.
I need to be able to write tests where