New #Regal release is out! v0.8.0 brings a bunch of new features and improvements to your favorite #Rego linter, including a #GitHub output format which will annotate PRs with linter violations. Also four new #linter rules to catch both issues as well as non-idiomatic coding style. Check it out!
#regal #Rego #github #linter #opa #OpenPolicyAgent #devops #devsecops #development
New blog just dropped! On using a #linter as a tool for learning a new #programming language, and how I tried to apply some of those ideas while building #Regal, the new linter for #Rego.
https://www.styra.com/blog/guarding-the-guardrails-introducing-regal-the-rego-linter/
#linter #programming #regal #Rego #OpenPolicyAgent #opa #cloudnative #cncf #PolicyAsCode
Friends in #Norway! 🇳🇴 And I'm lucky to have many of those by now. June 29 I will be talking #OpenPolicyAgent and all things related at the local #OWASP meetup. Come join me, @webtonull and a whole bunch of other smart and fun people for what I'm sure will be a great event. Not many spots left, so make sure to RSVP right away.
#norway #OpenPolicyAgent #owasp
It's hot outside, but you know what's even hotter? The #CloudNative meetup taking place at the Google office in #Stockholm this evening. I'll be talking about how to translate "real" policy, like the upcoming #EUCS framework into #PolicyAsCode using #OpenPolicyAgent and #Rego. Also, my buddy Abdel to present on ambient service mesh and #Istio. Good times!
#cloudnative #stockholm #eucs #PolicyAsCode #OpenPolicyAgent #Rego #Istio #CloudNativeNordics #cncf #devops #devsecops #code
What better to bring into the weekend than a new #OPA release? v0.53.0 is mainly a bugfix release, but a new "crypto.x509.parse_keypair" built-in function is also included, as well as retry functionality for the http.send function. Enjoy!
https://github.com/open-policy-agent/opa/releases/tag/v0.53.0
#opa #OpenPolicyAgent #opensource
#Kubecon just learned that #OpenPolicyAgent and Rego now has JSON schema validation built-in. i can imagine a lot of use (or abuse) of this in the future.
I also love them showing how to use this to avoid silly typos, validate input data matches a schema before checking values in the data
15:25 today at #KubeCon, I’ll talk about the upcoming #EUCS scheme for cloud service providers, and how #OpenPolicyAgent and other #CloudNative technologies can help solve #compliance and certification challenges across organizations. Join in, it’ll be fun!
#kubecon #eucs #OpenPolicyAgent #cloudnative #compliance
So far it seems to be a spec for how to define and then use standard naming (and naturally tokens/certs) to identify and then of course authenticate workloads #KubeCon
Best of all, a quick Google shows that there are already people playing with #SPIFFE and #OpenPolicyAgent
https://github.com/spiffe/spire-tutorials/blob/main/k8s/envoy-opa/k8s/backend/config/opa-policy.rego
This session is showing off integration with #CertManager
#kubecon #SPIFFE #OpenPolicyAgent #certmanager
Breakfast at #Arlanda airport with @johanfylling. Next stop #Amsterdam and #KubeCon!
Plan for today is catching the #OPA talk at #CloudNative #Wasm day with @charlieegan3, then to meet up with collages and friend at the #OpenPolicyAgent meetup in the evening. Good times ahead! 🚀
#arlanda #amsterdam #kubecon #opa #cloudnative #wasm #OpenPolicyAgent
@katexochen I’ll be there! Most often in the #Styra booth and the #OpenPolicyAgent kiosk. Come by and say hi 🙂
My talk on distributed #authorization using #OpenPolicyAgent, from #APIDays in Paris 🇫🇷 is now on YouTube! 😃
#authorization #OpenPolicyAgent #apidays
Awesome new addition to the #OPA ecosystem! A proxy in front of the #HashiCorp #Nomad API, which allows policy-powered "admission control", similar to that in #Kubernetes.
#opa #HashiCorp #nomad #kubernetes #cloudnative #devops #devsecops #Rego #OpenPolicyAgent
Today I got to talk #authorization in distributed systems, and how #OpenPolicyAgent helps solve the problem across large, complex organizations and environments, at #IdentityDay in #Oslo 🇳🇴
Unfortunately I wasn’t feeling well, so I couldn’t stay for the rest of the event, but despite a soar throat my talk seemed well-received 😊
#authorization #OpenPolicyAgent #identityday #oslo
Spent time today building out a new training series on #Kubernetes #Policy with #AdmissionController, #OpenPolicyAgent, and #Gatekeeper.
#admissioncontroller #gatekeeper #OpenPolicyAgent #policy #kubernetes
Eventful week last one! I turned 40, and #OPA turned v0.50.0! Lots of good stuff in this release, like new built-in functions for JSON schema verification, a new shorthand syntax for fetching remote bundles, performance improvements, and more. Check it out!
#OpenPolicyAgent #JSONSchema #Rego
https://github.com/open-policy-agent/opa/releases/tag/v0.50.0
#opa #OpenPolicyAgent #jsonschema #Rego
Hi @anderseknert, do you have a playlist or a kind of path/journey to follow to start with OPA ?
#OpenPolicyAgent #securityascode
Making it easier to run #OPA connected to a remote bundle server by simply pointing to the bundle (and without providing a config file):
opa run -s https://foo.com/my/bundle.tar.gz
Usability improvements, however small, never fails to make me happy.
#opa #opensource #OpenPolicyAgent
Released yesterday, and I'm proud to have contributed to Styra Load! An enterprise distribution of #OpenPolicyAgent
with some seriously impressive features, like a 10x reduction in memory usage, 40% increase in CPU throughput, and more. If you're running OPA for data-heavy workloads, try it out! 😃
#OpenPolicyAgent #styra #styraload
Good introductory article on using #Conftest to enforce #PolicyAsCode decisions against Ansible Playbooks.
https://www.redhat.com/sysadmin/conftest-policy-as-code-ansible
#conftest #PolicyAsCode #opa #OpenPolicyAgent #Rego