Strict Mode Constraints and Checks The Rego compiler supports strict mode , where additional constraints and safety checks are enforced during compilation. Compiler rules that wi...

Logging Monitoring and Alerts Istio OPA Gatekeeper CIS Scans Rancher contains a variety of tools that aren’t included in Kubernetes to assist in your DevOps operations. Ranch...

Goals Prerequisites Steps 1. Create an empty policy definition that will allow all requests. 2. Install the opa-docker-authz plugin. 4. Run a simple Docker command to make sure...

Goals Prerequisites Steps 1. Create an empty policy definition that will allow all requests. 2. Install the opa-docker-authz plugin. 4. Run a simple Docker command to make sure...

Debugging Performance Issues Benchmarking Queries Analyzing Decision Logs Envoy External Authorization Filter Configuration Interacting with the gRPC server This page provide...

Debugging Performance Issues Benchmarking Queries Analyzing Decision Logs Envoy External Authorization Filter Configuration Interacting with the gRPC server Debugging Tips T...

Sub-project docs Docs File Structure Markdown Page Structure Create a local branch Update Existing Docs Adding New Pages Test your changes Submit a Pull Request Having trou...

How do I make user attributes stored in LDAP/AD available to OPA for making decisions? How does OPA do conflict resolution? Does Statement Order Matter? Which Equality Operator ...

Built-in Policies Policy Sources Policy Distribution Update Interval Built-in Policies Policy Sources Built-in policies are mainly written in Rego . Those policies are manag...

What is WebAssembly (Wasm)? Overview Current Status Compiling Policies Advanced Compiling Options Using Compiled Policies JavaScript SDK From Scratch Instantiating the Wasm Mo...