Open Policy Agent (OPA)

• https://www.openpolicyagent.org/

• Rego is OPA native query language
• Gatekeeper (Kubernetes)

Related

• Styra
• Envoy
• Kubernetes PodSecurityPolicy (PSP) (deprecated)
• Checkov

See also

• Gatekeeper, installation, XProtect, OPA, gatekeeper.sh, config.gatekeeper.sh, gatekeeper-webhook-service
• Open Policy Agent (OPA), Gatekeeper
• Kubernetes security, OPA, EKS security, PSA, PSS, CKS, SecurityContext, containerSecurityContext, Trivy, KubeBench, Kubernetes Admission Controllers admissionregistration.k8s.io, Hardeneks, Gatekeeper (Kubernetes), kubernetes.io/enforce-mountable-secrets, Auditing, security context, readOnlyRootFilesystem, allowPrivilegeEscalation, kube-bench