Skip to content
#

opa

open-policy-agent logo

The Open Policy Agent (OPA, pronounced “oh-pa”) is an open source, general-purpose policy engine that unifies policy enforcement across the stack. OPA provides a high-level declarative language that lets you specify policy as code and simple APIs to offload policy decision-making from your software. You can use OPA to enforce policies in microservices, Kubernetes, CI/CD pipelines, API gateways, and more.

Community & Support

What is OPA

Here are 184 public repositories matching this topic...

gatekeeper
zhilingc
zhilingc commented Feb 21, 2022

What steps did you take and what happened:
Needed to add the pod annotations

podAnnotations:
  traffic.sidecar.istio.io/excludeOutboundIPRanges: 10.207.0.1/32
  traffic.sidecar.istio.io/includeOutboundIPRanges: '*'

to avoid istio interfering with kubernetes API calls made by gatekeeper services.
The annotations are not applied to the job pods.

**What did you expect to happen

opal
cloudkey
cloudkey commented Dec 2, 2020

Is your feature request related to a problem? Please describe.
Ranger is a popular solution for big data permission verification, but it does not support AWS-S3 permission verification at present.

Describe the solution you'd like
At present, I have an idea that the Proxy intercepts the S3 request, sends the request to ranger-S3-Plugin for authorization verification, and then sends t