An open source, general-purpose policy engine.
-
Updated
Jun 28, 2023 - Go
The Open Policy Agent (OPA, pronounced “oh-pa”) is an open source, general-purpose policy engine that unifies policy enforcement across the stack. OPA provides a high-level declarative language that lets you specify policy as code and simple APIs to offload policy decision-making from your software. You can use OPA to enforce policies in microservices, Kubernetes, CI/CD pipelines, API gateways, and more.
What is OPA
An open source, general-purpose policy engine.
Write tests against structured configuration data using the Open Policy Agent Rego query language
Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.
Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
Find, install and publish Kubernetes packages
A curated list of OPA related tools, frameworks and articles
An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.
A policy management tool for interacting with Gatekeeper
Integrations, examples, and proof-of-concepts that are not part of OPA proper.
Scan Kubernetes resource files , and helm charts for security configurations issues and best practices.
Flux v1: Manage a multi-tenant cluster with Flux and Kustomize
Style guide for Rego
This repository offers a comprehensive library of security policies designed to enhance the security of Kubernetes cluster configurations. The policies are developed in accordance with the CIS Kubernetes benchmark.
Regal is a linter for Rego, with the goal of making your Rego magnificent!
Open Policy Agent WebAssembly NPM module (opa-wasm)
Kubernetes Operator to manage Dynamic Admission Controllers using Open Policy Agent
DevSpace Cloud
The Container Security Book—a free book for practitioners
Create Kubernetes AdmissionReview requests from Kubernetes resource manifests