An open source, general-purpose policy engine.
-
Updated
Feb 25, 2023 - Go
The Open Policy Agent (OPA, pronounced “oh-pa”) is an open source, general-purpose policy engine that unifies policy enforcement across the stack. OPA provides a high-level declarative language that lets you specify policy as code and simple APIs to offload policy decision-making from your software. You can use OPA to enforce policies in microservices, Kubernetes, CI/CD pipelines, API gateways, and more.
What is OPA
An open source, general-purpose policy engine.
Write tests against structured configuration data using the Open Policy Agent Rego query language
Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
Find, install and publish Kubernetes packages
Policy and data administration, distribution, and real-time updates on top of Open Policy Agent
An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.
A curated list of OPA related tools, frameworks and articles
A policy management tool for interacting with Gatekeeper
Integrations, examples, and proof-of-concepts that are not part of OPA proper.
Scan Kubernetes resource files , and helm charts for security configurations issues and best practices.
Flux v1: Manage a multi-tenant cluster with Flux and Kustomize
Style guide for Rego
This repository provides a security policies library that is used for securing Kubernetes clusters configurations. The security policies are created based on CIS Kubernetes benchmark and rules defined in Kubesec.io.
Open Policy Agent WebAssembly NPM module (opa-wasm)
Kubernetes Operator to manage Dynamic Admission Controllers using Open Policy Agent
DevSpace Cloud
The Container Security Book—a free book for practitioners
Create Kubernetes AdmissionReview requests from Kubernetes resource manifests
A set of shared policies for use with Conftest and other Open Policy Agent tools