Open Policy Agent (OPA)

• https://www.openpolicyagent.org/

• Rego is OPA native query language

Related

• Gatekeeper (Kubernetes)
• Styra
• Envoy
• Kubernetes PodSecurityPolicy (PSP) (deprecated)

See also

• Gatekeeper, installation, XProtect, OPA, gatekeeper.sh, config.gatekeeper.sh, gatekeeper-webhook-service
• Open Policy Agent (OPA), Gatekeeper
• Kubernetes security, OPA, EKS security, PSA, PSS, CKS, SecurityContext, Trivy, KubeBench, Kubernetes Admission Controllers admissionregistration.k8s.io, Hardeneks, Gatekeeper (Kubernetes), kubernetes.io/enforce-mountable-secrets, Auditing