Upgrade to Pro — share decks privately, control downloads, hide ads and more …

OPA for policy enforcement

Sibi
April 29, 2020

OPA for policy enforcement

Sibi

April 29, 2020
Tweet

More Decks by Sibi

Other Decks in Technology

Transcript

  1. OPA OPA Project started in a company named Styra at

    2016 Currently an incubator project at Linux founda on (CNCF) Goal: Unify policy enforcement
  2. Iteration Iteration networks = [{ "id": "net1", "public": false}, {

    "id": "net2", "public": false}] > networks[x] +---+------------------------------+ | x | networks[x] | +---+------------------------------+ | 0 | {"id":"net1","public":false} | | 1 | {"id":"net2","public":false} | +---+------------------------------+
  3. Rules Rules any_public_networks = true { # is true if...

    net := networks[_] # some network exists and.. net.public # it is public. }