thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

DevOps & Automation · Advanced

Open Policy Agent (OPA)

A CNCF graduated general-purpose policy engine that evaluates policies written in Rego against JSON input.

Definition

OPA decouples policy decisions from application logic and is used for Kubernetes admission control (via Gatekeeper), Terraform plan checks (conftest), API authorization, and more.

Example

A Gatekeeper constraint denies pods that do not set resource limits.

Exam tip

Rego is OPA's language; Gatekeeper is the Kubernetes admission integration.

Related terms