Open Policy Agent, with Tim Hinrichs and Torin Sandall
Tim Hinrichs and Torin Sandall are the creators of Open Policy Agent (OPA), a project which allows policy to be integrated with popular cloud native software (including Kubernetes and Envoy) or anything you write yourself. Adam and Craig discuss OPA with Tim and Torin after the news of the week.
Do you have something cool to share? Some questions? Let us know:
- web: kubernetespodcast.com
- mail: kubernetespodcast@google.com
- twitter: @kubernetespod
Chatter of the week
- The cupboard was bare
- Marmite is not a satisfactory substitute for baking yeast
- 4D jigsaw puzzles (or a picture, if not for sale in your location)
News of the week
- Anthos for AWS is now Generally Available
- Eurosys ‘20:
- Cloud Foundry becomes more Kubernetes-native with cf-for-k8s
- Paketo Buildpacks
- Changes to Kubernetes release cycles for 2020
- Aqua Security announces Dynamic Threat Analysis
- RHEL 8.2 adds new container tools
- Red Hat product life cycle changes
- Flatcar Linux now supported on VSphere
- sKan from Alcide
- kubeletctl from CyberArk
- xls-kubectl by Daniele Polencic of Learnk8s
- Microsoft’s new reverse proxy
- Running decades-old games in containers by Misha Brukman
- TorchServe and TorchElastic for Kubernetes by Facebook and AWS
- Project Astra from NetApp
- Styra adds mutating webhooks to Declarative Authorization Service
- Simulating clock skew by PingCAP
Links from the interview
- Open Policy Agent
- Styra
- Episode 42 with John Murray
- Plate smashing
- OASIS XACML
- The origin of Open Policy Agent and Rego
- Founded in 2015: first commit
- Donated to the CNCF Sandbox in 2018 and moved to incubation in 2019
- Rego configuration language
- Running as a Go API
- Bundles
- Admission controllers in Kubernetes
- Existing Kubernetes policies
- OPA Gatekeeper: Policy and Governance for Kubernetes
- OPA and WebAssembly
- Hooli examples
- Tim Hinrichs and Torin Sandall on Twitter
