Open Policy Agent, with Tim Hinrichs and Torin Sandall

Tim Hinrichs and Torin Sandall are the creators of Open Policy Agent (OPA), a project which allows policy to be integrated with popular cloud native software (including Kubernetes and Envoy) or anything you write yourself. Adam and Craig discuss OPA with Tim and Torin after the news of the week.

Do you have something cool to share? Some questions? Let us know:

• web: kubernetespodcast.com
• mail: [email protected]
• twitter: @kubernetespod

Chatter of the week

• The cupboard was bare
• Marmite is not a satisfactory substitute for baking yeast
• 4D jigsaw puzzles (or a picture, if not for sale in your location)

News of the week

• Anthos for AWS is now Generally Available
  • TechCrunch coverage
• Eurosys '20:
  • Autopilot paper
  • Borg: The Next Generation paper
  • Cluster traces
• Cloud Foundry becomes more Kubernetes-native with cf-for-k8s
• Paketo Buildpacks
  • Everything you need to know about them
  • How they fit into the Cloud Native landscape
• Changes to Kubernetes release cycles for 2020
• Aqua Security announces Dynamic Threat Analysis
• RHEL 8.2 adds new container tools
• Red Hat product life cycle changes
• Flatcar Linux now supported on VSphere
  • Episode 79 with Chris Kühl
• sKan from Alcide
• kubeletctl from CyberArk
• xls-kubectl by Daniele Polencic of Learnk8s
• Microsoft's new reverse proxy
  • YARP
• Running decades-old games in containers by Misha Brukman
• TorchServe and TorchElastic for Kubernetes by Facebook and AWS
  • Controller code
• Project Astra from NetApp
  • Launch video
• Styra adds mutating webhooks to Declarative Authorization Service
• Simulating clock skew by PingCAP

Links from the interview

• Open Policy Agent
• Styra
• Episode 42 with John Murray
• Plate smashing
• OASIS XACML
  • OPA is… "easier"
• The origin of Open Policy Agent and Rego
• Founded in 2015: first commit
• Donated to the CNCF Sandbox in 2018 and moved to incubation in 2019
• Rego configuration language
• Running as a Go API
• Bundles
• Admission controllers in Kubernetes
• Existing Kubernetes policies
  • NetworkPolicy
  • LimitRange
• OPA Gatekeeper: Policy and Governance for Kubernetes
• OPA and WebAssembly
• Hooli examples
• Tim Hinrichs and Torin Sandall on Twitter