Tim Hinrichs and Torin Sandall are the creators of Open Policy Agent (OPA), a project which allows policy to be integrated with popular cloud native software (including Kubernetes and Envoy) or anything you write yourself. Adam and Craig discuss OPA with Tim and Torin after the news of the week.

Do you have something cool to share? Some questions? Let us know:

Chatter of the week

The cupboard was bare
Marmite is not a satisfactory substitute for baking yeast
4D jigsaw puzzles (or a picture, if not for sale in your location)

News of the week

Anthos for AWS is now Generally Available
- TechCrunch coverage
Eurosys ‘20:
Cloud Foundry becomes more Kubernetes-native with cf-for-k8s
Paketo Buildpacks
- Everything you need to know about them
- How they fit into the Cloud Native landscape
Changes to Kubernetes release cycles for 2020
Aqua Security announces Dynamic Threat Analysis
RHEL 8.2 adds new container tools
Red Hat product life cycle changes
Flatcar Linux now supported on VSphere
- Episode 79 with Chris Kühl
sKan from Alcide
kubeletctl from CyberArk
xls-kubectl by Daniele Polencic of Learnk8s
Microsoft’s new reverse proxy
- YARP
Running decades-old games in containers by Misha Brukman
TorchServe and TorchElastic for Kubernetes by Facebook and AWS
- Controller code
Project Astra from NetApp
- Launch video
Styra adds mutating webhooks to Declarative Authorization Service
Simulating clock skew by PingCAP

Links from the interview

Open Policy Agent
Styra
Episode 42 with John Murray
Plate smashing
OASIS XACML
- OPA is… “easier”
The origin of Open Policy Agent and Rego
Founded in 2015: first commit
Donated to the CNCF Sandbox in 2018 and moved to incubation in 2019
Rego configuration language
Running as a Go API
Bundles
Admission controllers in Kubernetes
Existing Kubernetes policies
- NetworkPolicy
- LimitRange
OPA Gatekeeper: Policy and Governance for Kubernetes
OPA and WebAssembly
Hooli examples
Tim Hinrichs and Torin Sandall on Twitter

Open Policy Agent, with Tim Hinrichs and Torin Sandall

Kubernetes Podcast from Google