Skip to main content

OPA Ecosystem

Showcase of OPA integrations, use-cases, and related projects.

Create With OPA

Integrate with OPA from your language

Rego Language

Rego is the policy language used by OPA and there are various integrations that make working with the language easier.

Debugging Rego – Work out what's going on with your Rego policies
Learning Rego – Learn and write Rego
Policy Testing – Test and validate Rego policies

OPA at Scale

OPA has a number of features that are most useful when running OPA in production. These integrations make use of those features, and make it easier to use OPA at scale.

External Data: Push – Manage and update external data loaded into OPA
External Data: Runtime – Load in on demand at runtime
External Data – Manage and update external data loaded into OPA
Discovery Bundles – Distribute flexible configuration to OPAs
Bundles – Distribute policy and data to OPA instances
Status API – Gather runtime information from OPA instances

Tool Integrations

OPA plays nice with a range of existing tools too via some bespoke integrations.

Code Editors – Use OPA and Rego in your editor
Envoy – Integrate with the Envoy proxy
Kubernetes – Integrate OPA with Kubernetes
Terraform – Integrate OPA with Terraform

Created with OPA

OPA's SDKs and APIs offer a solid foundation for all kinds of projects. See the integrations below for inspiration.

Go Integrations – Projects using OPA as a Go module
REST API Integrations – Examples of projects which integrate with the OPA REST API.
Wasm Integrations – Projects using the Wasm functionality of OPA.

All Entries & Integrations

All integrations are ordered by the number of linked resources. Add yours!

Kubernetes Admission Control

Control cluster operations with Rego policies

Terraform Policy

Check resources are compliant before they're deployed.

Styra Declarative Authorization Service

Policy as Code Control Plane

Container Network Authorization with Envoy

Official OPA Envoy Integration

Kafka Topic Authorization

Build fine grained access control for Kafka topics

Regal

The Linter of Rego Language

Spring Security Authorization

Use OPA to make authorization decisions in Spring applications

Trino

Aserto

Rönd

Conftest

Rego policy for configuration files

Styra Enterprise OPA

env0

OPA Gatekeeper

Rego Policy Controller for Kubernetes

OPA Wasm Javascript Module

PHP OPA Library

Strimzi (Apache Kafka on Kubernetes)

Topaz

Authorization Integration with Apache APISIX

AWS CloudFormation Hook

Container Signing, Verification and Storage in an OCI registry

Dapr

dependency-management-data

A set of tooling to get a better understanding of the use of dependencies across your organisation.

Flipt

CloudNative Feature Flag Management

i2scim.io SCIM Restful User/Group Provisioning API

Kubernetes Authorization

Kubescape

Kubernetes security posture scanner

Legitify

Security policy for SCM

Nomad Admission Control Proxy

NACP

OPA ASP.NET Core SDK (Styra)

C# OPA SDK (Styra)

Wasm .NET Package (me-viper)

OPA Go SDK

Java OPA Wasm SDK (Styra)

Java OPA SDK (Styra)

Typescript OPA SDK (Styra)

Wasm .NET Package (christophwille)

OPA Wasm Rust Crate

OPAL

Open Policy Administration Layer

Permit.io

Pomerium Access Proxy

Principled Evolution (GOPAL & AICertify)

Pulumi

raygun

Black-box Automated Testing for Rego

Scalr

Policy enforcement for Terraform

Spacelift

SPIRE

Swift-OPA

Swift package for evaluating OPA IR Plans

Torque

Traefik API Gateway

VS Code Extension

OPA Integration for the VS Code editor

walt.id SSI Kit

Self-Sovereign Identity toolkit with OPA policy support

Atmos

Backstage

Boomerang Bosun Policy Gating

Bottle Application Authorization

Ceph Object Storage Authorization

Chef Automate

Operational Visibility Dashboard

Kubernetes Admission Control using Vulnerability Scanning

Cloudflare Worker Enforcement of OPA Policies Using Wasm

HTTP API Authorization in Dart

Digger

GitOps for Terraform

Docker controls via OPA Policies

Elasticsearch Data Filtering

Enterprise Contract

Fairwinds Insights Configuration Validation Software

fig

Flask-OPA

GCP audit with Forseti

GitHub Action for OPA Rego Test

GitHub Action to automate testing OPA Rego policies

Gloo API Gateway

Google Calendar

GKE Policy Automation

Gradle Build Plugin (Bisnode)

GraphQL

IPTables

API Gateway Authorization with Kong

KubeShield

Secure Kubernetes using eBPF & Open Policy Agent

SSH and Sudo Authorization with Linux

Lula

The Cloud-Native Compliance Engine

Magda

OAuth2

Open Policy Containers

A Docker-inspired workflow for OPA policies

OpenID Connect (OIDC)

.NET Package (me-viper)

OPA Errors

OPA error message reference

OPA Playground

Online Rego Playground

OPA Spring Boot SDK (Styra)

Wasm Java Gradle SDK (sangkeon)

OpenFaaS Serverless Function Authorization

OPToggles (Open Policy Toggles)

Pre-commit hooks

Rego Cheat Sheet

Quick reference for learning Rego

rego-test-assertions

Helper functions for unit testing Rego

regocpp

Rekor transparency log monitoring and alerting

Reposaur

SQL Database Data Filtering

Styra Academy

OPA Learning Portal

TavoAI

Terraform Cloud

Alfred

Self-hosted OPA playground

Alluxio

ANTLR Grammar

Awesome OPA List

AWS API Gateway

Carbonetes - BrainIAC

CircleCI

App authorization for Clojure

CoreDNS Authorization

Library-based Microservice Authorization

Easegress

Emissary-Ingress

Express OR in Rego

Idiomatic Rego Examples

fiber

Jenkins Job Trigger Policy Enforcement

Kubernetes Provisioning

Minio API Authorization

Nginx

NodeJS Express (build-security)

Java Client (Bisnode)

Python Client (Turall)

Open Service Mesh (OSM)

Rego Language Comparisons

Learn Rego by comparison

Sansshell

Automatically document Rego policies

Armory Policy Engine for Spinnaker

Sysdig Image Scanner Admission Controller

ccbr

CIS Benchmark for Kubernetes with Rego

Zed Extension

OPA Integration for the Zed editor