Open Policy Agent - Contributions

This repository holds integrations, examples, and proof-of-concepts that work with the Open Policy Agent (OPA) project.

Examples and Integrations

• Kafka Authorization
• HTTP API Authorization (Spring Security)
• HTTP API Authorization (Linkerd)
• HTTP API Authorization (Python)
• HTTP API Authorization (Dart)
• SSH and sudo Authorization (PAM)
• Puppet Authorization
• Container Image Policy (Kubernetes and CoreOS Clair)
• Data Filtering (SQL)
• Data Filtering (Elasticsearch)

This a list of integrations that are not currently part of the contrib repository:

• HTTP API Authorization with Kong (built by @maxTN)
• Helm policies (built by @eicnix)
• Install and load OPA with Habitat (built by @srenatus)
• Python/Flask extension for HTTP API Authorization and Policy Enforcement Points (built by @EliuX)
• ANTLR v4 Rego Grammar (built by @anadon)

Contributing

If you have built an integration, example, or proof-of-concept on top of OPA that you would like to release to the community, feel free to submit a Pull Request against this repository. Please create a new top-level directory containing:

• A README.md explaining what your integration does
• A Makefile to build your integration

Building and Releasing

Most integrations include a top-level Makefile with two targets:

• build - compiles/lints/tests the integration
• push - builds the integration and publishes artifacts

Many of the integrations produce one or more Docker images. These Docker images can be pushed to the hub.docker.com/u/openpolicyagent repository (assuming you are authorized.)

The Makefile in this directory contains build and push targets to build and push all integrations.