Fosstodon

Nicolas Fränkel 🇺🇦🇬🇪Note from Teemu, Tim, and Torin to the <a href="https://mastodon.top/tags/OpenPolicyAgent" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenPolicyAgent</a> community<a href="https://blog.openpolicyagent.org/note-from-teemu-tim-and-torin-to-the-open-policy-agent-community-2dbbfe494371" rel="nofollow noopener" translate="no" target="_blank">https://blog.openpolicyagent.org/note-from-teemu-tim-and-torin-to-the-open-policy-agent-community-2dbbfe494371</a><a href="https://mastodon.top/tags/OPA" class="mention hashtag" rel="nofollow noopener" target="_blank">#OPA</a> <a href="https://mastodon.top/tags/Styra" class="mention hashtag" rel="nofollow noopener" target="_blank">#Styra</a> <a href="https://mastodon.top/tags/Apple" class="mention hashtag" rel="nofollow noopener" target="_blank">#Apple</a>

Nicolas Fränkel 🇺🇦🇬🇪Policy-Driven <a href="https://mastodon.top/tags/CostOptimization" class="mention hashtag" rel="nofollow noopener" target="_blank">#CostOptimization</a> with <a href="https://mastodon.top/tags/OpenPolicyAgent" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenPolicyAgent</a> and <a href="https://mastodon.top/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a><a href="https://medium.com/@platform.engineers/policy-driven-cost-optimization-with-open-policy-agent-opa-and-kubernetes-aa53f61b624d" rel="nofollow noopener" translate="no" target="_blank">https://medium.com/@platform.engineers/policy-driven-cost-optimization-with-open-policy-agent-opa-and-kubernetes-aa53f61b624d</a><a href="https://mastodon.top/tags/OPA" class="mention hashtag" rel="nofollow noopener" target="_blank">#OPA</a>

Sandor SzücsSkipper deployed as ingress in your <a href="https://hachyderm.io/tags/kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#kubernetes</a> cluster and <a href="https://hachyderm.io/tags/OpenPolicyAgent" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenPolicyAgent</a> as rule engine got a significant speedup <a href="https://github.com/zalando/skipper/releases/tag/v0.22.51" rel="nofollow noopener" translate="no" target="_blank">https://github.com/zalando/skipper/releases/tag/v0.22.51</a> Blue line “old” Red line “new”

Open Policy Agent (OPA)Great blog from Square, on how they built a custom solution for <a href="https://infosec.exchange/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kubernetes</a> guardrails on top of Open Policy Agent. This is a perfect example of the flexibility OPA provides organizations to solve the most advanced use cases!<a href="https://developer.squareup.com/blog/kube-policies-guardrails-for-apps-running-in-kubernetes/" rel="nofollow noopener" translate="no" target="_blank">https://developer.squareup.com/blog/kube-policies-guardrails-for-apps-running-in-kubernetes/</a><a href="https://infosec.exchange/tags/OPA" class="mention hashtag" rel="nofollow noopener" target="_blank">#OPA</a> <a href="https://infosec.exchange/tags/OpenPolicyAgent" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenPolicyAgent</a> <a href="https://infosec.exchange/tags/CloudNative" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudNative</a> <a href="https://infosec.exchange/tags/CNCF" class="mention hashtag" rel="nofollow noopener" target="_blank">#CNCF</a> <a href="https://infosec.exchange/tags/DevOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevOps</a> <a href="https://infosec.exchange/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevSecOps</a>

Open Policy Agent (OPA)The <a href="https://infosec.exchange/tags/KubeCon" class="mention hashtag" rel="nofollow noopener" target="_blank">#KubeCon</a> recordings are now on YouTube! We'll be posting links to all the <a href="https://infosec.exchange/tags/OpenPolicyAgent" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenPolicyAgent</a> related ones as we watch them. First out is the <a href="https://infosec.exchange/tags/OPA" class="mention hashtag" rel="nofollow noopener" target="_blank">#OPA</a> maintainer track session, where <a href="https://hachyderm.io/@charlieegan3" class="u-url mention" rel="nofollow noopener" target="_blank">@charlieegan3</a> and <a href="https://swecyb.com/@anderseknert" class="u-url mention" rel="nofollow noopener" target="_blank">@anderseknert</a> give a short introduction to OPA and Rego, followed by a deep-dive into recent performance improvements, and a sneak peek at the project roadmap. Check it out!<a href="https://www.youtube.com/watch?v=XtA-NKoJDaI" rel="nofollow noopener" translate="no" target="_blank">https://www.youtube.com/watch?v=XtA-NKoJDaI</a><a href="https://infosec.exchange/tags/CloudNative" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudNative</a> <a href="https://infosec.exchange/tags/CNCF" class="mention hashtag" rel="nofollow noopener" target="_blank">#CNCF</a> <a href="https://infosec.exchange/tags/DevOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevOps</a> <a href="https://infosec.exchange/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevSecOps</a> <a href="https://infosec.exchange/tags/PolicyAsCode" class="mention hashtag" rel="nofollow noopener" target="_blank">#PolicyAsCode</a>

Anders EknertFor anyone at <a href="https://swecyb.com/tags/KubeCon" class="mention hashtag" rel="nofollow noopener" target="_blank">#KubeCon</a>, me and <a href="https://hachyderm.io/@charlieegan3" class="u-url mention" rel="nofollow noopener" target="_blank">@charlieegan3</a> will close the day off by presenting an introduction, deep-dive and roadmap for <a href="https://swecyb.com/tags/OpenPolicyAgent" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenPolicyAgent</a> at 17:30. I know it’s late, but stick around, as we have a lot of cool things to show you!<a href="https://kccnceu2025.sched.com/event/1td0h/open-policy-agent-opa-intro-deep-dive-charlie-egan-styra" rel="nofollow noopener" translate="no" target="_blank">https://kccnceu2025.sched.com/event/1td0h/open-policy-agent-opa-intro-deep-dive-charlie-egan-styra</a><a href="https://swecyb.com/tags/CloudNative" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudNative</a> <a href="https://swecyb.com/tags/CNCF" class="mention hashtag" rel="nofollow noopener" target="_blank">#CNCF</a> <a href="https://swecyb.com/tags/DevOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevOps</a> <a href="https://swecyb.com/tags/OPA" class="mention hashtag" rel="nofollow noopener" target="_blank">#OPA</a> <a href="https://swecyb.com/tags/Rego" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rego</a>

Johannes KastlToday I was in the mood and packaged <a href="https://digitalcourage.social/tags/regal" class="mention hashtag" rel="nofollow noopener" target="_blank">#regal</a> and <a href="https://digitalcourage.social/tags/opa" class="mention hashtag" rel="nofollow noopener" target="_blank">#opa</a> for <a href="https://fosstodon.org/@opensuse" class="u-url mention" rel="nofollow noopener" target="_blank">@opensuse</a>Packages still need more testing, but the first steps are done. Found a glitch in the OPA ldflags handling and reported it upstream.Should arrive in <a href="https://digitalcourage.social/tags/Tumbleweed" class="mention hashtag" rel="nofollow noopener" target="_blank">#Tumbleweed</a> soon-ish.<a href="https://digitalcourage.social/tags/packagerslife" class="mention hashtag" rel="nofollow noopener" target="_blank">#packagerslife</a> <a href="https://digitalcourage.social/tags/policyascode" class="mention hashtag" rel="nofollow noopener" target="_blank">#policyascode</a> <a href="https://digitalcourage.social/tags/OpenPolicyAgent" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenPolicyAgent</a> <a href="https://digitalcourage.social/tags/opensuse" class="mention hashtag" rel="nofollow noopener" target="_blank">#opensuse</a>

Anders Eknert9 years. I guess we’re doing this.. <a href="https://hachyderm.io/tags/OpenPolicyAgent" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenPolicyAgent</a> <a href="https://hachyderm.io/tags/OPA" class="mention hashtag" rel="nofollow noopener" target="_blank">#OPA</a>

Pyrzout :vm:SMB Force-Authentication Vulnerability Impacts All OPA Versions For Windows <a href="https://gbhackers.com/smb-auth-vulnerability-opa-windows/" rel="nofollow noopener" translate="no" target="_blank">https://gbhackers.com/smb-auth-vulnerability-opa-windows/</a> <a href="https://social.skynetcloud.site/tags/OpenPolicyAgent" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenPolicyAgent</a>(OPA)Security <a href="https://social.skynetcloud.site/tags/NTLMCredentialExposure" class="mention hashtag" rel="nofollow noopener" target="_blank">#NTLMCredentialExposure</a> <a href="https://social.skynetcloud.site/tags/CVE" class="mention hashtag" rel="nofollow noopener" target="_blank">#CVE</a>/vulnerability <a href="https://social.skynetcloud.site/tags/CyberSecurityNews" class="mention hashtag" rel="nofollow noopener" target="_blank">#CyberSecurityNews</a> <a href="https://social.skynetcloud.site/tags/ExploitationTools" class="mention hashtag" rel="nofollow noopener" target="_blank">#ExploitationTools</a> <a href="https://social.skynetcloud.site/tags/CVE20248260" class="mention hashtag" rel="nofollow noopener" target="_blank">#CVE20248260</a>

Jamie TannaDependency Management Data's Open Policy Agent support is now a whole lot more efficientTalking about the latest release of Dependency Management Data and some refactoring that's led to better performance.<a href="https://fed.brid.gy/r/https://www.jvt.me/posts/2024/07/27/dmd-opa-perf/" rel="nofollow noopener" translate="no" target="_blank">https://fed.brid.gy/r/https://www.jvt.me/posts/2024/07/27/dmd-opa-perf/</a>

Jamie TannaDynamically querying EndOfLife.date data for internal packages with Open Policy Agent and Dependency Management DataHow you can retrieve End-of-Life data via EndOfLife.date using Dependency Management Data's Policies functionality.<a href="https://fed.brid.gy/r/https://www.jvt.me/posts/2024/07/14/dmd-opa-eol/" rel="nofollow noopener" translate="no" target="_blank">https://fed.brid.gy/r/https://www.jvt.me/posts/2024/07/14/dmd-opa-eol/</a>

Elizabeth K. JosephWe also saw community-driven efforts to support CI, binaries, and containers for the Eventing <a href="https://floss.social/tags/Kafka" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kafka</a> Broker receiver & dispatcher (containers), <a href="https://floss.social/tags/OpenPolicyAgent" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenPolicyAgent</a>'s Conftest (ci, binaries), <a href="https://floss.social/tags/Skupper" class="mention hashtag" rel="nofollow noopener" target="_blank">#Skupper</a> (ci, binaries), <a href="https://floss.social/tags/Goss" class="mention hashtag" rel="nofollow noopener" target="_blank">#Goss</a> (ci, binaries), & rotobuf-maven-plugin (ci) 🎉

Anders EknertAt last! Our <a href="https://hachyderm.io/tags/KubeCon" class="mention hashtag" rel="nofollow noopener" target="_blank">#KubeCon</a> talk "Open Policy Agent — Intro and Deep Dive" is now up on YouTube 😃 I can't stand hearing / watching myself talk, but hopefully you won't feel the same aversion. Covering an intro to the project, some updates, a roadmap, and much more. Check it out!<a href="https://www.youtube.com/watch?v=hENwFyrtm1g" rel="nofollow noopener" translate="no" target="_blank">https://www.youtube.com/watch?v=hENwFyrtm1g</a><a href="https://hachyderm.io/tags/OpenPolicyAgent" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenPolicyAgent</a> <a href="https://hachyderm.io/tags/OPA" class="mention hashtag" rel="nofollow noopener" target="_blank">#OPA</a> <a href="https://hachyderm.io/tags/Rego" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rego</a> <a href="https://hachyderm.io/tags/Gatekeeper" class="mention hashtag" rel="nofollow noopener" target="_blank">#Gatekeeper</a>

Anders EknertGood morning from <a href="https://hachyderm.io/tags/KubeCon" class="mention hashtag" rel="nofollow noopener" target="_blank">#KubeCon</a>! If you’re here and want to meet, find me in the <a href="https://hachyderm.io/tags/OpenPolicyAgent" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenPolicyAgent</a> kiosk in the project pavilion. Also, don’t miss my talk on today at 15:25 if you’re curious about <a href="https://hachyderm.io/tags/OPA" class="mention hashtag" rel="nofollow noopener" target="_blank">#OPA</a>, <a href="https://hachyderm.io/tags/Rego" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rego</a>, and anything related.<a href="https://kccnceu2024.sched.com/event/1Yhhn" rel="nofollow noopener" translate="no" target="_blank">https://kccnceu2024.sched.com/event/1Yhhn</a>

HabrМежсервисная авторизация в Авито PaaSАнтон Губарев, инженер в Avito PaaS, рассказал, как реализовать межсервисную авторизацию на 2500 сервисов и ничего не сломать.<a href="https://habr.com/ru/companies/avito/articles/796851/" rel="nofollow noopener" translate="no" target="_blank">https://habr.com/ru/companies/avito/articles/796851/</a><a href="https://zhub.link/tags/istio" class="mention hashtag" rel="nofollow noopener" target="_blank">#istio</a> <a href="https://zhub.link/tags/envoy" class="mention hashtag" rel="nofollow noopener" target="_blank">#envoy</a> <a href="https://zhub.link/tags/opa" class="mention hashtag" rel="nofollow noopener" target="_blank">#opa</a> <a href="https://zhub.link/tags/openpolicyagent" class="mention hashtag" rel="nofollow noopener" target="_blank">#openpolicyagent</a>

pezhoreAnyone have a good write up/how-to for standing up <a href="https://infosec.exchange/tags/OpenPolicyAgent" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenPolicyAgent</a> server? Looking at the documentation, I'm a bit lost on how to point it to rego files, and how to have my clients call OPA to evaluate their JSON.My use case is kind of fun - have all my team's Terraform repos do a pre-merge OPA evaluation on the Terraform plan. I'd like to get away from bundling the rego with the repos - the developers could just change the accept criteria and hope nobody notices in the pull request.So success looks like having a rego file on a remote opa server that will allow a user to POST a url with their terraform plan, and get back the results.Any ideas?(ping <a href="https://hachyderm.io/@anderseknert" class="u-url mention" rel="nofollow noopener" target="_blank">@anderseknert</a>) <a href="https://infosec.exchange/tags/Terraform" class="mention hashtag" rel="nofollow noopener" target="_blank">#Terraform</a> <a href="https://infosec.exchange/tags/CICD" class="mention hashtag" rel="nofollow noopener" target="_blank">#CICD</a> <a href="https://infosec.exchange/tags/OPA" class="mention hashtag" rel="nofollow noopener" target="_blank">#OPA</a> <a href="https://infosec.exchange/tags/OpenPolicyAgent" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenPolicyAgent</a>

pezhore<a href="https://hachyderm.io/@anderseknert" class="u-url mention" rel="nofollow noopener" target="_blank">@anderseknert</a> This looks really cool - I need to carve out some time at work to dive back into Open Policy Agent. We have a decent little workflow for validating Terraform plans, but I'd love to get it further refined.Plus, getting a OPA server rather than trusting the engineers/pipeline to validate their own policy would be nice.<a href="https://infosec.exchange/tags/OPA" class="mention hashtag" rel="nofollow noopener" target="_blank">#OPA</a> <a href="https://infosec.exchange/tags/OpenPolicyAgent" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenPolicyAgent</a> <a href="https://infosec.exchange/tags/Terraform" class="mention hashtag" rel="nofollow noopener" target="_blank">#Terraform</a> <a href="https://infosec.exchange/tags/workflows" class="mention hashtag" rel="nofollow noopener" target="_blank">#workflows</a>

Anders EknertWhat better way to spend the weekend than with a new version of <a href="https://hachyderm.io/tags/Regal" class="mention hashtag" rel="nofollow noopener" target="_blank">#Regal</a>? Everyone's favorite <a href="https://hachyderm.io/tags/Rego" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rego</a> linter now have 2 more new rules, and some other nice improvements added. Check it out!<a href="https://github.com/StyraInc/regal/releases/tag/v0.15.0" rel="nofollow noopener" translate="no" target="_blank">https://github.com/StyraInc/regal/releases/tag/v0.15.0</a><a href="https://hachyderm.io/tags/OPA" class="mention hashtag" rel="nofollow noopener" target="_blank">#OPA</a> <a href="https://hachyderm.io/tags/OpenPolicyAgent" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenPolicyAgent</a> <a href="https://hachyderm.io/tags/DevOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevOps</a> <a href="https://hachyderm.io/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevSecOps</a> <a href="https://hachyderm.io/tags/PolicyAsCode" class="mention hashtag" rel="nofollow noopener" target="_blank">#PolicyAsCode</a>

Anders EknertJust published! <a href="https://hachyderm.io/tags/OpenPolicyAgent" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenPolicyAgent</a> 2023, year in review. It’s always such a joy looking back at everything that happened in our community in the past year. And for a project the size of <a href="https://hachyderm.io/tags/OPA" class="mention hashtag" rel="nofollow noopener" target="_blank">#OPA</a>, it’s a *lot*.Thanks <a href="https://hachyderm.io/@charlieegan3" class="u-url mention" rel="nofollow noopener" target="_blank">@charlieegan3</a>, <a href="https://hachyderm.io/@ritazh" class="u-url mention" rel="nofollow noopener" target="_blank">@ritazh</a> and <a href="https://hachyderm.io/@jpreese" class="u-url mention" rel="nofollow noopener" target="_blank">@jpreese</a> for co-authoring the blog with me.Check it out!<a href="https://blog.openpolicyagent.org/open-policy-agent-2023-year-in-review-4c12df22e351" rel="nofollow noopener" translate="no" target="_blank">https://blog.openpolicyagent.org/open-policy-agent-2023-year-in-review-4c12df22e351</a><a href="https://hachyderm.io/tags/CloudNative" class="mention hashtag" rel="nofollow noopener" target="_blank">#CloudNative</a> <a href="https://hachyderm.io/tags/CNCF" class="mention hashtag" rel="nofollow noopener" target="_blank">#CNCF</a> <a href="https://hachyderm.io/tags/OpenSource" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenSource</a>

Anders EknertRegal v0.14.0 just released! 🎉 The latest edition of the <a href="https://hachyderm.io/tags/OPA" class="mention hashtag" rel="nofollow noopener" target="_blank">#OPA</a> community's favorite <a href="https://hachyderm.io/tags/Rego" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rego</a> linter features two new rules, a new output format, and many improvements and fixes. Release notes and downloads here: <a href="https://github.com/StyraInc/regal/releases/tag/v0.14.0" rel="nofollow noopener" translate="no" target="_blank">https://github.com/StyraInc/regal/releases/tag/v0.14.0</a><a href="https://hachyderm.io/tags/OpenPolicyAgent" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpenPolicyAgent</a> <a href="https://hachyderm.io/tags/DevOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevOps</a> <a href="https://hachyderm.io/tags/DevSecOps" class="mention hashtag" rel="nofollow noopener" target="_blank">#DevSecOps</a> <a href="https://hachyderm.io/tags/PolicyAsCode" class="mention hashtag" rel="nofollow noopener" target="_blank">#PolicyAsCode</a> <a href="https://hachyderm.io/tags/Linter" class="mention hashtag" rel="nofollow noopener" target="_blank">#Linter</a> <a href="https://hachyderm.io/tags/CodeQuality" class="mention hashtag" rel="nofollow noopener" target="_blank">#CodeQuality</a> <a href="https://hachyderm.io/tags/IAM" class="mention hashtag" rel="nofollow noopener" target="_blank">#IAM</a>

Recent searches

Search options

Administered by:

Server stats:

#OpenPolicyAgent