Zelarsoft

Open Policy Agent: What Is OPA and How It Works (Examples)

Open Policy Agent is an open-source engine that provides a way of declaratively writing policies as code and then using those policies as part of a decision-making process. OPA can be used for several purposes:🔹 Authorization of REST API endpoints.🔹 Allowing or denying Terraform changes based on compliance or safety rules.🔹 Integrating custom authorization logic… Continue reading Open Policy Agent: What Is OPA and How It Works (Examples)

OPA, Styra and Terraform: protect your cloud

Introduction to Styra DAS: Styra Declarative Authorization Service (DAS), built on top of the open-source project Open Policy Agent (OPA), provides a single pane of glass for authorization and policy across the cloud-native ecosystem of software systems. Using the DAS allows you to use a single language for expressing policy and a single software system… Continue reading OPA, Styra and Terraform: protect your cloud

Integration of Envoy with OPA and Styra DAS

In this blog, you will learn how to add a policy in Styra DAS to Integrate Envoy with OPA and Styra. OPA (Open Policy Agent): The Open Policy Agent (OPA, pronounced “oh-pa”) is an open-source, general-purpose policy engine that unifies policy enforcement across the stack. You can use OPA to enforce policies in microservices, Kubernetes,… Continue reading Integration of Envoy with OPA and Styra DAS

Integrating Kubernetes with Styra DAS – Enforcing users to create pods in the default namespace.

In this article, you will learn how to enforce users to create pods by default Kubernetes namespace using OPA and Styra DAS. Pre-requisites: Styra-DAS Account (You can sign-up and create a free Styra DAS account here) Kubernetes cluster (You can create a Kubernetes cluster using K3D) Steps for creating cluster: For creating a Kubernetes cluster in k3d,… Continue reading Integrating Kubernetes with Styra DAS – Enforcing users to create pods in the default namespace.

Integrate OPA (Open Policy Agent) with Istio & Styra DAS

In this blog, you will learn how OPA embedded in the Istio data plane can be used as an authorization service to enforce security policies over API requests received by Istio. What is Istio? Istio is an open-source service mesh that layers transparently onto existing distributed applications. Istio’s powerful features provide a uniform and more… Continue reading Integrate OPA (Open Policy Agent) with Istio & Styra DAS

Styra DAS, OPA, and Envoy Integration Give You Fine-Grained Access Control Over Microservice API Authorization.

What is Envoy? Envoy is an L7 proxy and communication bus designed for large modern service-oriented architectures. Envoy supports an External Authorization filter which calls an authorization service to check if the incoming request is authorized or not. This feature makes it possible to delegate authorization decisions to an external service and makes the request context… Continue reading Styra DAS, OPA, and Envoy Integration Give You Fine-Grained Access Control Over Microservice API Authorization.

OPA to Integrate with Kubernetes Admission Control → Ingresses: Restrict Hostnames

What Is OPA? It is a project that started in 2016 to unify policy enforcement across different technologies and systems. Today, OPA is used by giant players within the tech industry. For example, Netflix uses OPA to control its internal API resources. Chef uses it to provide IAM capabilities in their end-user products. In addition,… Continue reading OPA to Integrate with Kubernetes Admission Control → Ingresses: Restrict Hostnames

Integrating Kuma with Styra DAS

In this blog, you will learn how to install Kuma on a Kubernetes cluster and add ingress policies in Styra DAS to integrate Kuma with Styra DAS. What is Kuma? Kuma is a platform-agnostic open-source control plane for service mesh and microservices management, with support for Kubernetes, VM, and bare-metal environments. Kuma addresses the limitations… Continue reading Integrating Kuma with Styra DAS

Integrating OPA With Envoy on Styra DAS

Styra DAS: The Styra Declarative Authorization Service (DAS), built on top of the open-source project Open Policy Agent (OPA), provides a single pane of glass for authorization and policy across the cloud-native ecosystem of software systems. Using the DAS allows you to use a single language for expressing policy and a single software system for… Continue reading Integrating OPA With Envoy on Styra DAS