榜单
服务器优惠
AI论文
IT文库
-
Debugging Tips
Check for the openpolicyagent.org/policy-status annotation on ConfigMaps containing policies Check the kube-mgmt container logs for error messages Check the opa container logs... -
Debugging Tips
Check for the openpolicyagent.org/policy-status annotation on ConfigMaps containing policies Check the kube-mgmt container logs for error messages Check the opa container logs... -
Introduction
Overview Example Rego References Expressions (Logical AND) Variables Iteration Rules Complete Rules Partial Rules Logical OR Putting It Together Running OPA 1. Download... -
Introduction
Overview Example Rego References Expressions (Logical AND) Variables Iteration Rules Complete Rules Partial Rules Logical OR Putting It Together Running OPA 1. Download... -
External Data
Option 1: JWT Tokens Flow Updates Size Limitations Security Option 2: Overload input Flow Updates Size Limitations Security Recommended usage: Local, Dynamic data Optio... -
外部授权
外部授权 概述 局限性 OSM 与 OPA 插件外部授权演练 外部授权 概述 外部授权允许将传入 HTTP 请求的授权卸载到可能不在代理上下文中运行的远程端点。 支持外部授权的代理将针对每个请求向远程端点发起权限检查。由于系统可能拥有大量 RPS，外部授权有许多可调整的设置，以允许或多或少的控制，但会牺牲性能（仅发送 HTTP 有效负载或标头... -
Overview & Architecture
What is OPA Gatekeeper? How Does It Work With Plain OPA and Kube-mgmt? Additional Resources In Kubernetes, Admission Controllers enforce policies on objects during create, upd... -
External authorization (ext_authz) filter
External authorization (ext_authz ) filter Step 1: Start all of our containers Step 4: Access the upstream-service behind the Front Envoy External authorization (ext_authz ) f... -
HTTP APIs
Goals Prerequisites Steps 1. Create a policy bundle. 2. Bootstrap the tutorial environment using Docker Compose. 3. Check that alice can see her own salary. 4. Check that bob... -
Discovery
Discovery Service API Example Limitations Discovery Bundle Signature OPA can be configured to download bundles of policy and data, report status, and upload decision logs to r...