Zelarsoft

Integration of Envoy with OPA and Styra DAS

In this blog, you will learn how to add a policy in Styra DAS to Integrate Envoy with OPA and Styra. OPA (Open Policy Agent): The Open Policy Agent (OPA, pronounced “oh-pa”) is an open-source, general-purpose policy engine that unifies policy enforcement across the stack. You can use OPA to enforce policies in microservices, Kubernetes,… Continue reading Integration of Envoy with OPA and Styra DAS

Integrating Kubernetes with Styra DAS – Enforcing users to create pods in the default namespace.

In this article, you will learn how to enforce users to create pods by default Kubernetes namespace using OPA and Styra DAS. Pre-requisites: Styra-DAS Account (You can sign-up and create a free Styra DAS account here) Kubernetes cluster (You can create a Kubernetes cluster using K3D) Steps for creating cluster: For creating a Kubernetes cluster in k3d,… Continue reading Integrating Kubernetes with Styra DAS – Enforcing users to create pods in the default namespace.

Integrate OPA (Open Policy Agent) with Istio & Styra DAS

In this blog, you will learn how OPA embedded in the Istio data plane can be used as an authorization service to enforce security policies over API requests received by Istio. What is Istio? Istio is an open-source service mesh that layers transparently onto existing distributed applications. Istio’s powerful features provide a uniform and more… Continue reading Integrate OPA (Open Policy Agent) with Istio & Styra DAS

OPA to Integrate with Kubernetes Admission Control → Ingresses: Restrict Hostnames

What Is OPA? It is a project that started in 2016 to unify policy enforcement across different technologies and systems. Today, OPA is used by giant players within the tech industry. For example, Netflix uses OPA to control its internal API resources. Chef uses it to provide IAM capabilities in their end-user products. In addition,… Continue reading OPA to Integrate with Kubernetes Admission Control → Ingresses: Restrict Hostnames