OPA Newsletter: September 2022
September Edition!
Happy September Everyone! This month's edition is coming in a little late, but don't worry, it's still packed with great information.
Don't forget to register for Cloud Native Policy Day with OPA! More info at bottom.
Community Updates
The Rego Playground now has a "Format" button! 🎉
This button auto-formats your policy code in the editor, as well as your input/data JSON documents.
Ecosystem Updates
Open Policy Agent v0.44.0
- security fixes, which mitigate CVE-2022-36085 in OPA itself, and CVE-2022-27664 and CVE-2022-32190 in our Go build tooling.
- Linear performance scaling for sets up into the 500k key range and beyond
- The union builtin is now about 15-30% faster than the equivalent operation in pure Rego.
- This release introduces two new builtins: strings.any_prefix_match, and strings.any_suffix_match.
NPM-OPA-WASM v1.8.0
We will discuss these new features in the September 20th Office Hours. Sign up today and send in your questions.
Community Tools
Goast
Go AST (Abstract Syntax Tree) based static analysis tool with Rego.
Java App with OPA Policies
Motivation for this code and application was to try to understand and implement the Hexagonal Architecture — also called Port and Adapter Architecture.
OPA Support for Go Fiber
Open Policy Agent support for Fiber.
Note: Requires Go 1.16 and above
Blogs
Read up on how the OPA community is using OPA.
- Control User Access and Permissions in CVAT with Open Policy Agent
- What Exposed OPA Servers Can Tell You About Your Applications
- Using XACML with OPA and Rego: The Best of Both Worlds
- Authorize REST API with OPA (Japanese)
- Controlling Kafka Data Flows using Open Policy Agent
- Introduction of Open Policy Agent / Rego to realize Policy as Code (Japanese)
- Collaborating on Access Control Policies with Open Policy Agent
Events 📆
Cloud Native Policy Day with OPA, Oct 25th
Cloud Native Policy Day with OPA hosted by Styra, the creators of Open Policy Agent, will bring together the OPA community for a day of sharing and discussing policy-as-code best practices, key learnings and creative use cases for OPA. Project maintainers will be on hand to field 1:1 questions and provide live-coding demos — and you'll see proven real-world implementations from various OPA adopters during each of the sessions.
Whether you're looking to start down your policy journey, or are an OPA adopter with Rego skills to share, join the community for sharing, learning and socializing.
Attendees are invited to come for the full day with lunch provided or to stop by just for the sessions that interest them most. To register for the event, add Cloud Native Policy Day with OPA from the co-located event list selections when registering for KubeCon + CloudNativeCon NA 2022 or add it to your existing registration by selecting "modify" on your confirmation page or clicking the "modify" link in your confirmation email.
Let us know how we did
The OPA monthly newsletter is built for the OPA community, let us know what you liked or what you wanted to see more of.