Scratching an Itch: Running Policy in Hard to Reach Places with WASM & OPA
Talkat Cloud Native Wasm Day Europe 2023 · on Tuesday, 2023-04-18· at 13:45· Hall 7, Room C | Ground Floor | Europe Complex·
summary
Demonstrates compiling Rego into Wasm modules and shipping them to every policy decision point so Rego compiled to Wasm runs wherever servers can’t (browsers, CDNs, phones). A Go booking API and a JS web client both load the same Wasm module so client and server enforce identical policy: email regex and example.com block, departure ≠ destination, same-area constraint (Europe vs Japan), minimum one passenger, and a seat adjacency graph using graph.reachable; validations execute locally with immediate feedback and prevent invalid bookings.
AI-written summary · about
chapters (5)
- 0:00Start
- 2:57What is Policy Evaluation?
- 4:40Open Policy Agent: Intro
- 5:47Open Policy Agent: Rego
- 11:01Demo
related talks
32mOPA: So What Does the Policy Do?
01h 06mOPA everywhere! Exploring new opportunities in policy evaluation
41mKubernetes Policy As Code using WebAssembly
31mDeploying Policy-as-Code with Readable Rego Policies, and Open Policy Agent
41mLeveraging WebAssembly to Write Kubernetes Admission Policies
34mFine-grained Authorization in a Containerized World
39mApplying Policy Throughout The Application Lifecycle with Open Policy Agent
01h 17mChoose Your Own Adventure: Wasm Edition