Scan Kubernetes resource files , and helm charts for security configurations issues and best practices.
-
Updated
Mar 3, 2023 - JavaScript
The Open Policy Agent (OPA, pronounced “oh-pa”) is an open source, general-purpose policy engine that unifies policy enforcement across the stack. OPA provides a high-level declarative language that lets you specify policy as code and simple APIs to offload policy decision-making from your software. You can use OPA to enforce policies in microservices, Kubernetes, CI/CD pipelines, API gateways, and more.
What is OPA
Scan Kubernetes resource files , and helm charts for security configurations issues and best practices.
A proof of concept for RBAC on nginx with Open Policy Agent
Add policies to your Golang app with Open Policy Agent
Proof of concept for using OpenPolicyAgent as an authorization layer.
How Open Policy Agent (OPA) and policy-as-a-code address a wide range of problems from implementing policies, and checks, to application customisation and configuration.