Policy as Code

Open Policy Agent (OPA) is a policy engine that enables policy enforcement across the entire application and infrastructure stack. Policies are defined using a high level language called Rego.

OPA evaluates queries posed by application against predefined policies and returns a decision to the application; this allows policy decisions to be decoupled from application where they are enforced.

In this demo oriented workshop, we will give a brief overview of the policy language Rego and show how you might use Rego and OPA in the following use cases:

1. Make decisions regarding access control in a Node application. We will also see how to deploy such an application to a Kubernetes cluster.
2. Validate if configuration files are well formed; we will show examples of how you might enforce best practices for Kubernetes resources in a Skaffold pipeline prior to deployment.

This workshop assumes some level familiarity with web application, Docker and Kubernetes.

Note: Rego and OPA can also be used as a policy engine (Gatekeeper) in Kubernetes. This use case will NOT be covered in this workshop.