Open Policy Agent Intro
Talkat KubeCon + CloudNativeCon North America 2020 Virtual · on Wednesday, 2020-11-18· at 15:50· Intrado Virtual Event Platform,·
summary
Open Policy Agent is a general-purpose policy engine that evaluates JSON inputs using the Rego declarative language and runs as a binary or sidecar; the demo shows the web playground, uses pprof profiling, and finds 4 violations for a privileged-pod constraint. Gatekeeper implements a Kubernetes validating admission webhook plus an audit loop, is marked stable and supports Helm3, emits audit events, and has mutation and constraint-template tooling planned and under active development.
AI-written summary · about
chapters (11)
- 0:00Intro
- 0:40What is OPA
- 6:33Open Policy Playground
- 11:14Where do you use them
- 13:39Latest and greatest
- 16:30What is Gatekeeper
- 18:26Highlights of Gatekeeper
- 20:28Virtual Kubernetes EU
- 22:27Gatekeeper Demo
- 27:33Current Status
- 28:09Future Plans
