DevOps · Flashcard
What is the Open Policy Agent (OPA)?
- AA general-purpose policy engine — evaluating rules to make decisions decoupled from application code
- BA Kubernetes admission controller — compiled into the API server to validate every request
- CA container runtime scanner — inspecting images for policy violations before they are deployed
- DA secrets manager — storing and distributing credentials to applications that request them
Why this is the answer
OPA is a general-purpose engine that evaluates policies to return decisions, letting services offload authorization and configuration rules to one place. It is not a compiled-in admission controller (Gatekeeper adapts OPA for that), not an image scanner, and not a secrets manager.
Official docs