Open Policy Agent, with Tim Hinrichs and Torin Sandall

Tim Hinrichs and Torin Sandall are the creators of Open Policy Agent (OPA), a project which allows policy to be integrated with popular cloud native software (including Kubernetes and Envoy) or anything you write yourself. Adam and Craig discuss OPA with Tim and Torin after the news of the week. Do you have something cool to share? Some questions? Let us know: web: kubernetespodcast.com mail: [email protected] twitter: @kubernetespod Chatter of the week The cupboard was bare Marmite is not a satisfactory substitute for baking yeast 4D jigsaw puzzles (or a picture, if not for sale in your location) News of the week Anthos for AWS is now Generally Available TechCrunch coverage Eurosys ‘20: Autopilot paper Borg: The Next Generation paper Cluster traces Cloud Foundry becomes more Kubernetes-native with cf-for-k8s Paketo Buildpacks Everything you need to know about them How they fit into the Cloud Native landscape Changes to Kubernetes release cycles for 2020 Aqua Security announces Dynamic Threat Analysis RHEL 8.2 adds new container tools Red Hat product life cycle changes Flatcar Linux now supported on VSphere Episode 79 with Chris Kühl sKan from Alcide kubeletctl from CyberArk xls-kubectl by Daniele Polencic of Learnk8s Microsoft’s new reverse proxy YARP Running decades-old games in containers by Misha Brukman TorchServe and TorchElastic for Kubernetes by Facebook and AWS Controller code Project Astra from NetApp Launch video Styra adds mutating webhooks to Declarative Authorization Service Simulating clock skew by PingCAP Links from the interview Open Policy Agent Styra Episode 42 with John Murray Plate smashing OASIS XACML OPA is… “easier” The origin of Open Policy Agent and Rego Founded in 2015: first commit Donated to the CNCF Sandbox in 2018 and moved to incubation in 2019 Rego configuration language Running as a Go API Bundles Admission controllers in Kubernetes Existing Kubernetes policies NetworkPolicy LimitRange OPA Gatekeeper: Policy and Governance for Kubernetes OPA and WebAssembly Hooli examples Tim Hinrichs and Torin Sandall on Twitter