Open Policy Agent

opa

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

gatekeeper

🐊 Gatekeeper - Policy Controller for Kubernetes

conftest

Write tests against structured configuration data using the Open Policy Agent Rego query language

gatekeeper-library

📚 The OPA Gatekeeper policy library

contrib

Integrations, examples, and proof-of-concepts that are not part of OPA proper.

opa-envoy-plugin

A plugin to enforce OPA policies with Envoy

kube-mgmt

Sidecar for managing OPA instances in Kubernetes.

npm-opa-wasm

Open Policy Agent WebAssembly NPM module (opa-wasm)

frameworks

vscode-opa

An extension for VS Code which provides support for OPA

library

The Open Policy Agent project standard library.

example-api-authz-go

Example Go service that uses OPA for API authorization.

cert-controller

opa-docker-authz

A policy-enabled authorization plugin for Docker.

opa-idea-plugin

Open Policy Agent plugin for IntelliJ

opa-envoy-spire-ext-authz

OPA-Envoy-SPIRE External Authorization Example.

setup-opa

Sets up Open Policy Agent CLI in your GitHub Actions workflow.

rego-python

Python library for interacting with Rego ASTs.

example-api-authz-python

Example Python service that uses OPA for API authorization.

community

The Community repository is the place to go for support with OPA and OPA Sub-Projects, like Conftest and Gatekeeper.

golang-opa-wasm

Open Policy Agent WebAssembly Go SDK

gatekeeper-external-data-provider

A template repository for building external data providers for Gatekeeper.